Playing It SFAPE: Code Execution in Isolated User Modehttps://www.reddit.com/r/netsec/comments/1x4s0yk/playing_it_sfape_code_execution_in_isolated_user
Doyensec discovered multiple vulnerabilities in SFAPE.dll , a VBS enclave shipped with Windows, and chained them to gain code execution within the enclave in Windows Isolated User Mode (VTL1). The post explores how VBS enclaves work and how memory corruption can undermine their isolation guarantees. Microsoft addressed the reported issue in the September 2026 bulletin under CVE-2026-83498 . submitted by /u/nibblesec [link] [comments]