Integer overflow or wraparound in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.
CWE-190, CWE-416