Administrator code execution via incorrect directory permissions

Privilege escalation in Microsoft Windows Update Assistant before 10.0.19043.867 allows local users to execute code as Administrator. The Update Assistant assigns incorrect permissions to a directory, allowing low-privileged code to leverage that directory for arbitrary code execution. Exploitation requires existing low-privileged code execution and user interaction, and successful attacks run code in the Administrator context.