Privilege Escalation

GetProcessHandleFromHwnd: How One Windows API Enabled a Persistent UAC Bypass

Google Project Zero traces a public Quick Assist UAC bypass back to a poorly documented Win32 API that Microsoft only half-fixed in 2023 — and shows why fully protected processes stayed exploitable until Windows 11 24H2.