Out-of-bounds read in Windows RNDIS allows an unauthorized attacker to elevate privileges with a physical attack.
CWE-125