Use after free in Windows COM allows an authorized attacker to elevate privileges locally.