Release of invalid pointer or reference in RPC Runtime allows an authorized attacker to elevate privileges locally.
CWE-763