An unintended proxy or intermediary, known as a confused deputy, in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. A confused deputy is a security situation where a privileged entity is tricked by a less privileged entity into performing an action on its behalf.