Local privilege escalation via untrusted pointer dereference

Untrusted pointer dereference in the Kernel Streaming WOW Thunk Service Driver allows local users to elevate privileges on affected Windows builds. Microsoft has not disclosed the vulnerable routine or whether the driver reads, writes, or invokes the attacker-controlled pointer. A low-privileged local account and code execution on the target are required; successful exploitation crosses the kernel privilege boundary and grants higher privileges.