Local privilege escalation via shared-resource use-after-free

A use-after-free race in Microsoft Windows User Interface Core allows local users to elevate privileges on affected Windows systems. The component improperly synchronizes concurrent access to a shared resource, permitting access after that resource is freed; Microsoft has not disclosed the resource, trigger, or affected code path. Exploitation requires local low-privileged access and winning a high-complexity race, after which the attacker crosses the vulnerable process's security boundary.