Windows Event Tracing Elevation of Privilege Vulnerability

A flaw in Windows Event Tracing allows an attacker to run commands with higher privileges than their account normally permits. An authenticated user can exploit this to gain system-level control.

Use-after-free vulnerability (CWE-416) in Windows Event Tracing enabling local privilege escalation. Attack vector requires local access and valid user credentials; successful exploitation results in SYSTEM-level code execution.