PhantomRPC is a newly disclosed architectural flaw in Windows RPC that lets a low-privileged process impersonate any client connecting to a missing RPC server – ending in SYSTEM. It affects every supported version of Windows, has no CVE, and Microsoft has declined to patch it. Here’s what it does, why “moderate severity” understates it, and what defenders can do.
