Local arbitrary file deletion after logon

Elevation of privilege in Microsoft antimalware products allows local users to delete arbitrary files after logging on to an affected system. Microsoft has not published the vulnerable code locus or the incorrect operation that permits deletion of attacker-selected files. Successful exploitation requires a low-privileged local logon; the resulting deletion can remove protected system data but does not itself establish arbitrary code execution.