Four-Byte Write and Timing Bug Let Researchers Run Code in Windows SmartScreen Enclave

Security researchers successfully executed their own code within a secure area of the Windows operating system, a Virtualization-Based Security (VBS) enclave, which is designed to remain isolated and secure even in the event of a system compromise. This specific enclave is responsible for storing sensitive information related to a Windows anti-phishing feature, including passwords. The researchers achieved this by exploiting a four-byte write and timing bug. The exploit was demonstrated in a controlled laboratory setting as a proof of concept. The vulnerability allows attackers to access a supposedly secure part of the system. The researchers' work shows that even isolated areas of the operating system can be vulnerable to exploitation.