Windows Session Object Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the way that Windows handles session objects. A locally authenticated attacker who successfully exploited the vulnerability could hijack the session of another user.

To exploit the vulnerability, the attacker could run a specially crafted application.

The security update corrects how Windows handles session objects to prevent user session hijacking.