Shai Sarfaty

The issue is related to the Microsoft Antimalware Client in Windows Defender, which uses an incorrect pathname for MsMpEng.exe. This allows local users to gain privileges via a crafted application.