Local privilege escalation via untrusted pointer dereference

Untrusted pointer dereference in Windows Core Messaging allows local users with low privileges to elevate privileges on affected Windows systems. Microsoft identifies an untrusted pointer dereference in Core Messaging but has not disclosed the affected function or how attacker-controlled data becomes a pointer. An attacker must already have local low-privilege access; successful exploitation yields elevated privileges with complete control of the affected system.