Local privilege escalation through undisclosed service flaw

Privilege escalation in Microsoft Windows Connected Devices Platform Service allows local users to gain elevated privileges on affected systems. Microsoft has not published the flawed code path or the operation it performs incorrectly on attacker-controlled input. Exploitation requires existing low-privilege local access and high attack complexity, and successful exploitation compromises system confidentiality, integrity, and availability.