Authored by James Forshaw, Google Security Research

Windows Credential guard does not prevent using encrypted Kerberos keys to change a user’s password leading to elevation of privilege.

advisories | CVE-2022-35771