Q1Ugu

A use-after-free condition in the Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an application continues to use a pointer after it has been freed.

Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally on the system.