AttackFeed by Joe Wagner | Defense in depth -- the Microsoft way (part 94): BACKDOOR planted in AppLocker  - Full Disclosure

Defense in depth — the Microsoft way (part 94): BACKDOOR planted in AppLocker  – Full Disclosure

Posted on By Joe-W No Comments on Defense in depth — the Microsoft way (part 94): BACKDOOR planted in AppLocker  – Full Disclosure
Alert Feeds

 

Posted by Stefan Kanthak via Fulldisclosure on Sep 22

Hi @ll,

since several years Microsoft installs the DLLs domain_actions.dll
and well_known_domains.dll as part of their Edge browser as well as
Windows’ WebView component into each and every user profile,
UNPROTECTED against tampering.

On Windows 11 24H2 their paths are currently
“%LOCALAPPDATA%MicrosoftEdgeUser DataDomain Actions3.0.0.16domain_actions.dll”
“%LOCALAPPDATA%MicrosoftEdgeUser DataDomain…
 – Read More  – Full Disclosure 

You may also like

Alert Feeds
KL-001-2025-014: Xorux LPAR2RRD Read Only User Denial of Service  – Full Disclosure
July 28, 2025
Alert Feeds
SEC Consult SA-20250908-0 :: NFC Card Vulnerability Exploitation Leading to Free Top-Up in KioSoft “Stored Value” Unattended Payment Solution (Mifare)  – Full Disclosure
September 8, 2025
Alert Feeds
Rtpengine: RTP Inject and RTP Bleed vulnerabilities despite proper configuration (CVSS v4.0 Score: 9.3 / Critical)  – Full Disclosure
August 2, 2025
Alert Feeds
APPLE-SA-07-29-2025-7 tvOS 18.6  – Full Disclosure
July 30, 2025

Leave a Reply

AttackFeed by Joe Wagner
Powered by  GDPR Cookie Compliance
Privacy Overview

This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.