#lpe

RogueProvision: Windows Privilege Escalation in the Provisioning Engine — the SYSTEM Task That Applies Unsigned Packages

A SYSTEM service applies unsigned .ppkg packages from a folder — no signature, no consent. Microsoft's docs promise otherwise. Honest catch: admin→SYSTEM.