Improper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perform spoofing locally.
CWE-20, CWE-347