Microsoft has announced that it has launched the public preview of Win32 app isolation, a new Windows 11 security feature designed to isolate Windows desktop applications using the Win32 API
See also: Windows 11 KB5027231: Google Chrome issue for Malwarebytes users
During Microsoft's Build 2023 conference, it was announced that Win32 app isolation uses AppContainer to enhance security, reducing potential damage from compromised applications and protecting user privacy.
The feature ensures that applications run with low privileges and implements the principle of least privilege to prevent unauthorized access to user information without their approval
“The Win32 application is shipped as a low-integrity process using AppContainer, which is recognized as a security boundary by Microsoft,” said David Weston, Microsoft’s vice president of Enterprise Security and OS.
“Therefore, the process is limited to a specific set of Windows APIs by default and is not able to inject code into any process that runs at a higher integrity level.“
See also: Microsoft Paint gets Dark Mode support for Windows 11
If you exploit an vulnerability , the AppContainer runtime will ensure that the Win32 app isolation application remains limited to the minimum resources necessary for it to function .
This helps prevent malicious applications from running that could control the entire system, offering an extra layer of protection and safeguarding the system from potential hacking attempts.
Developers can improve Win32 app isolation using tools provided by Microsoft. This allows users to improve the overall security of their software and devices by ensuring that they do not add additional vulnerabilities to the system that could be exploited by attackers .
For more details on Win32 app isolation and guidance through the entire process, developers can visit this GitHub page. There, they will find valuable information about the startup and tools required to repackage MSIX apps and run them in isolation.
See also: How to download and install the Windows 11 2023 update
“Win32 app isolation is an addition to the family of existing Windows sandboxing options, such as Windows Sandbox and Microsoft Defender Application Guard,” said David Weston, Microsoft Vice President of Enterprise & OS Security.
“While these options are based on virtualization-based security, Win32 app isolation is based on AppContainers (and others).“
“AppContainers is specifically designed to encapsulate and restrict the execution of processes, contributing to securing their operation with limited privileges, which are usually referred to as low integrity levels.“
