Researchers Uncover Windows Flaws Granting Hackers Rootkit-Like Powers

New research into Windows' DOS-to-NT path conversion ("MagicDot" paths) shows unprivileged attackers can obtain rootkit-like capabilities — hiding/impersonating files, processes, and affecting tools like Process Explorer — and has produced multiple security issues (EoP deletion/write, RCE CVE-2023-36396, DoS CVE-2023-42757); Microsoft has addressed three of the identified shortcomings and one fix is pending.