Saint Windows Dirty Pipe, Who Broke Out of the Sandbox

Patron of Windows named pipes, leaky sandboxes, and names borrowed from Linux.

Life

In August 2022 the researcher k0shl described a privilege escalation in the Windows Named Pipe File System, the equivalent of the pipes processes use to pass data. A flaw in an old named pipe made it possible to escape the sandbox and climb in privilege. The name winks at Linux's Dirty Pipe, released a few months earlier, even though the two bugs do not resemble each other much.

Prayer

O Saint Windows Dirty Pipe, who drains out of the sandbox through a forgotten pipe, keep our named pipes clean. Amen.

How to celebrate

Celebrated by installing the Windows Patch Tuesday and checking which named pipes were left open.

Old pipe, new leak.