Elevated privileges are not dropped on external executable call.
vulners.com/securityvulns/securityvulns:doc:5617