An attacker can gain admin rights by exploiting an unpatched Windows vulnerability