The issue is related to a lack of access control in the Windows Update Stack component, which can be exploited to elevate privileges. An attacker must first obtain the ability to execute low-privileged code on the target system. This can allow an attacker to impact the system.