Improper access control in Windows Update Stack allows an authorized attacker to perform tampering locally.
CWE-15