Privilege escalation via printer-driver path validation

Improper path validation in Microsoft Windows Printer Service allows local users to execute code with elevated system privileges. While loading printer drivers, the service accepts a crafted file path without correctly validating it, enabling attacker-controlled code to load in a privileged service context. Exploitation requires an authenticated local session and a specially crafted application; Microsoft has not identified the affected function or path syntax publicly.