Local privilege escalation via kernel integer overflow

Integer overflow in the Windows Kernel allows local users with low privileges to elevate privileges on affected Windows systems. Microsoft has not disclosed the affected kernel routine or the arithmetic operation that wraps; an unvalidated public PoC targets NtQueryDirectoryObject with an oversized buffer length. Successful exploitation requires local low-privilege access and can cross a security boundary to gain higher privileges without user interaction.