Privileged file deletion via directory junction

Improper privilege management in Windows Setup allows local users to delete files through a crafted directory junction. Windows Setup follows the attacker-created junction during a privileged file operation and deletes a file outside the intended setup directory. Low-privileged code execution is required; privileged file deletion can interrupt Windows, while Microsoft classifies the issue as elevation of privilege.