Four-Byte Write and Timing Bug Let Researchers Run Code in Windows SmartScreen Enclave

Security researchers ran their own code inside a Windows VBS enclave, a protected memory area meant to stay sealed off even if the rest of the computer is compromised. The enclave handles passwords for a Windows anti-phishing feature. The exploit, a four-byte write and timing bug, was demonstrated in a lab as a proof of concept.