Exploiting Windows COM - WinRT Services

Explore the security vulnerabilities in Windows Component Object Model (COM) and Windows Runtime (WinRT) services in this 27-minute Black Hat conference talk. Dive into the extensive attack surfaces these widely-used technologies provide for hackers seeking Local Privilege Escalation (LPE), Remote Code Execution (RCE), and Sandbox Escape vulnerabilities. Learn from security researchers XueFeng Li and Zhiniang Peng as they discuss their findings of over 100 bugs in COM/WinRT services discovered within a year. Gain insights into cross-process communication vulnerabilities and potential security risks in UWP applications. Access the full abstract and presentation materials for a comprehensive understanding of exploiting Windows COM/WinRT services.