Local privilege escalation potentially allowed an attacker to write an arbitrary file with fully controlled content as a privileged user.
CWE-269