MAGICDOT: A HACKER'S MAGIC SHOW OF DISAPPEARING DOTS AND SPACES

Summary from the TLDR InfoSec newsletter

MagicDot is a set of several critical vulnerabilities in Windows related to path handling. It includes a remote code execution flaw and elevation of privilege flaws involving shadow copy restoration and file deletion, as well as techniques for an unprivileged user to gain rootkit-like abilities. These vulnerabilities stem from how Windows removes trailing dots and spaces during path conversion, permitting malicious path manipulation.