The issue is related to an untrusted search path vulnerability in the LoadLibrary function in the kernel. This vulnerability allows local users to gain privileges via a Trojan horse DLL in an unspecified directory. An elevation of privilege vulnerability exists when the LoadLibrary function fails to properly validate user input. An authenticated attacker who successfully exploits this vulnerability could elevate privileges on a targeted system, then install programs, view, change, or delete data, or create new accounts with full administrative rights.