Privilege escalation via uncontrolled search path

Uncontrolled search path handling in Intel System Support Utility for Windows before 4.1.0 allows local users to gain elevated code execution. The utility resolves code through a search path containing an attacker-writable location and can execute a planted file when a privileged user launches the affected workflow; Intel has not named the file or path element. Exploitation requires low-privileged local access, high-complexity preparation, and passive interaction by a privileged user, after which attacker code runs with that user's privileges.