Ken Kitahara

The issue is related to improper access control in the Windows SDK, allowing an authorized attacker to elevate privileges locally. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

An improper access control vulnerability exists in a specific folder of the software. This vulnerability can be exploited by a user who can log in to the PC where the product's Windows client is installed, allowing them to place an arbitrary file in the specific folder. If the file is a specially crafted DLL file, arbitrary code may be executed with SYSTEM privilege.