Missing authentication for critical function in Windows StateRepository API allows an authorized attacker to perform tampering locally.
CWE-306