🛡️ Security

AppContainer

A Windows sandbox that runs code with a restricted token and limited access to files, network and other resources, used by browser renderers and Office protected view. Attackers chain a local privilege-escalation bug to break out of an AppContainer and reach SYSTEM.

📚 Deep Dive

Learn Article

How Link-Following Bugs Turn Privileged File Operations Into SYSTEM Access

A link-following bug lets a low-privileged attacker redirect a trusted service's file operation to a target they choose. That is how CVE-2026-81963 reached SYSTEM on Windows.

intermediate 5 min read

Back to Glossary