Remotely Exploitable Type Confusion in Windows 8, 8.1, 10, Windows Server, etc
NScript is the component of mpengine that evaluates any filesystem or network activity that looks like JavaScript. To be clear, this is an unsandboxed and highly privileged JavaScript interpreter that is used to evaluate untrusted code, by default on all modern Windows systems. This is as surprising as it sounds.Double You Tee Eff.Why would mpengine ever want to evaluate javascript code coming over the network or file system? Even in a sandboxed environment?What could they protect against by evaluating the code instead of just trying to lexically scan/parse it?(I'm sure they had a reason - wondering what it is)