Arbitrary file deletion via directory junction

Privilege escalation in Microsoft Windows Update Assistant allows local users to delete arbitrary files through its privileged execution context. The assistant follows an attacker-created directory junction during a privileged file-deletion operation, redirecting deletion to a chosen file. The path requires prior low-privileged code execution on the Windows host; Microsoft reports availability impact without direct disclosure or modification of data.