Access of resource using incompatible type ('type confusion') in Windows Shell allows an authorized attacker to elevate privileges locally.