The issue arises from improper handling of objects in memory by the Windows kernel-mode driver, allowing local users to gain privileges via a crafted application. An attacker who successfully exploits this could execute arbitrary code with elevated privileges.