System denial of service via hard-link overwrite

Hard-link handling in Microsoft Windows allows local users with low-privileged code execution to cause a system denial of service. The Device Management Enrollment Service follows an attacker-created hard link and overwrites the contents of a chosen file under the service's authority. Exploitation requires local low-privileged code execution and can make the affected system unavailable; no remote path is reported.