Cortana Elevation of Privilege Vulnerability

<p>An Elevation of Privilege vulnerability exists when Cortana retrieves data from user input services without consideration for status. An attacker who successfully exploited the vulnerability could execute commands with elevated permissions.</p> <p>To exploit the vulnerability, an attacker would require physical/console access and the system would need to have Cortana assistance enabled.</p> <p>The security update addresses the vulnerability by ensuring Cortana considers status when retrieves information from input services.</p>

Where it's fixed