Defense in depth — the Microsoft way (part 96): yet another SAFER (SRPv1) and AppLocker (SRPv2) loophole  – Full Disclosure

Posted by Stefan Kanthak via Fulldisclosure on Mar 12

Hi @ll,

about 2 months ago I posted
<https://seclists.org/fulldisclosure/2025/Dec/29>
“Defense in depth — the Microsoft way (part 94):
SAFER (SRPv1 and AppLocker alias SRPv2) bypass for dummies”

Here’s the continuation…

About 23 years ago, 64-bit Windows introduced the WoW64 subsystem, which
performs a transpatent redirection of file system and registry accesses
for 32-bit applications.
To allow consistent appearance…
 – Read More  – Full Disclosure