Release of invalid pointer or reference in Windows COM allows an authorized attacker to elevate privileges locally.
CWE-122, CWE-763