Security-feature bypass via aliased-memory pointer dereference

Untrusted pointer dereference in Microsoft Windows VBS Enclave allows local users with administrator rights to bypass isolation. The enclave dereferences an untrusted address after writable DIMM SPD data makes aliased physical memory appear to occupy distinct addresses. Exploitation requires local administrative access and susceptible memory hardware, and grants arbitrary memory reads and writes affecting the secure kernel and protected defenses.