Local privilege escalation through code injection

Code injection in Microsoft Windows Search Service allows local users with low privileges to execute code beyond their security boundary. Microsoft identifies the weakness as code injection but has not published the responsible function, input path, or incorrect operation. Exploitation requires local low-privileged access and can compromise data integrity, confidentiality, and service availability outside the original boundary.