An elevation of privilege vulnerability exists in Windows Setup in the way it handles permissions.A locally authenticated attacker could run arbitrary code with elevated system privileges aka 'Windows Setup Elevation of Privilege Vulnerability'.