Improper privilege management in Windows Internet (wininet.dll) allows an authorized attacker to perform spoofing locally.
CWE-290