Google Project Zero has published research on Windows Administrator Protection, a feature intended to create a secure boundary for User Account Control (UAC). The researcher behind the post says they found nine bypasses in total, with the latest write-up focusing on a technique that abuses UI access.
The post notes that one of these bypasses was described in a previous blog entry, and that the feature was still vulnerable before its release. The new report adds another angle: rather than attacking the underlying security mechanism directly, the bypass works through the user interface, which can be a weaker link.
Because this is a single source, there are no conflicting accounts to compare. The findings come from Google's Project Zero team, which typically gives vendors time to patch before publishing details. The post does not specify whether these nine bypasses have been fixed, only that they were discovered.