Privilege escalation via Winlogon use-after-free

Use-after-free in Winlogon in Microsoft Windows allows local authenticated users to elevate privileges to SYSTEM. Microsoft has not disclosed the specific Winlogon code path, only that stale Winlogon memory can be dereferenced after the underlying object is freed. Exploitation requires local authenticated code execution first; successful exploitation yields full control of the host in the security context of SYSTEM.