You Won't Believe what this One Line Change Did to the Chrome Sandbox
Project Zero's James Forshaw found that a one-line change in Windows 10 1903's SepFilterToken kernel function, which copied the Parent Token ID directly from the old token instead of assigning a new one, broke the sibling-token check that Chromium's...