Severity

High

Analysis Summary

Microsoft Windows allows a local authenticated attacker to gain escalated privileges to the system. Windows can dupe users into trusting executables with DLL hijacking and privilege escalation issues. The error is caused by a flaw in the UAC module. An authenticated attacker can exploit this vulnerability to execute arbitrary codes with administrative privileges.

Impact

Privilege Escalation

Affected Vendors

Microsoft

Affected Products

• Microsoft Windows 7 SP1 x32
• Microsoft Windows 7 SP1 x64
• Microsoft Windows Vista
• Microsoft Windows 8 x32
• Microsoft Windows 8 x64
• Microsoft Windows 10 x32
• Microsoft Windows 10 x64

Remediation

Refer to Microsoft for patches and mitigation techniques at https://www.microsoft.com/en-us