Windows Modules Installer Service Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Windows Modules Installer Service improperly handles class object members.

A locally authenticated attacker could run arbitrary code with elevated system privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.

The update addresses the vulnerability by correcting how Windows handles calls to preclude unintended elevation.