Microsoft App Control for Business Security Feature Bypass Vulnerability

A vulnerability allowing unauthorized attackers to locally bypass security features in App Control for Business (WDAC) has been identified. This issue arises from improper verification of cryptographic signatures, which could enable attackers to spoof signatures and manipulate App Control policies.

Impact

Exploitation of this vulnerability could lead to unauthorized bypass of security features, allowing attackers to manipulate App Control policies by spoofing cryptographic signatures.

Remediation

Users can apply the security updates KB5060842 or KB5060841 to address this vulnerability. These updates are available through the Microsoft Update Catalog.