There seems to be some confusion in the comments about the nature of this exploit. This exploit is a kind of sandbox escape. It allow a low integrity process t

There seems to be some confusion in the comments about the nature of this exploit. This exploit is a kind of sandbox escape. It allow a low integrity process to run code as a medium (aka normal) integrity process. The exploit runs `splwow64.exe` which explorer "helpfully" auto elevates to medium integrity. The exploit then tricks `splwow64.exe` into running arbitrary code. It does not grant admin privileges. In practice this vulnerability isn't that scary on its own. Sandboxes don't (or shouldn't) rely solely on this form of mandatory access control for their security. However this attack could be used as part of a chain of exploits in ored to escape a sandbox.