TOCTOU

'ShieldCrash' exploit bypasses Microsoft Defender patch, enabling local SYSTEM file access

A zero-day exploit dubbed ShieldCrash bypasses Microsoft Defender’s latest patches, weaponizing a TOCTOU race condition in the engine to read files as SYSTEM.