Physical privilege escalation via dialog error mishandling

Improper error handling in the Windows Remote Access Common Dialog allows physically proximate attackers to execute code with elevated privileges. The dialog mishandles an error condition at the logon screen, allowing execution to proceed with elevated privileges; Microsoft has not disclosed the specific error path or operation. Physical access to a booted machine and its logon screen is required, and successful exploitation permits complete system takeover.