Dubious security vulnerability: Tricking a program into running non-elevated

Within the span of a week,ยน we received two security vulnerability reports that claimed that you could use the RunAsInvoker compatibility layer to run any program without requiring administrator privileges. I have pointed out in the past that RunAsInvoker is not a secret, even higher UAC setting, but rather

Click here to read the article