Improper link resolution before file access ('link following') in Windows Recovery Driver allows an authorized attacker to elevate privileges locally.
No PoCs from references.
- https://github.com/crisprss/CVEs