Windows Permissions Enforcement Elevation of Privilege Vulnerability

<p>An elevation of privilege vulnerability exists in the way that Windows enforces permissions if an attacker loads a specially crafted DLL. A locally authenticated attacker who successfully exploited this vulnerability could run arbitrary code as a system administrator. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>To exploit the vulnerability, an attacker would need to create and implement a malicious DLL and already be able to execute code on the target system.</p> <p>The security update addresses the vulnerability by correcting how Windows enforces permissions.</p>

Where it's fixed