One of the most interesting privilege escalation bugs in the Windows Subsystem for Linux (WSL) is CVE-2018-0743 - https://github.com/saaramar/execve_exploit The vulnerability stemmed from improper handling of objects in memory within WSL. By exploiting this flaw, a local authenticated attacker could manipulate the way Windows managed these objects, allowing them to elevate their privileges beyond their intended level. The resulting access could ultimately grant the attacker full administrative (SYSTEM-level) privileges, enabling complete control over the affected machine. Microsoft addressed the issue as part of its January 2018 security updates, eliminating the underlying memory handling flaw and preventing attackers from leveraging it for privilege escalation.
Post summary
A proof‑of‑concept exploit for CVE‑2018‑0743 is publicly available on GitHub, detailing a privilege‑escalation flaw in WSL that Microsoft later patched in January 2018.