The 2020 Pwnie Nominee For Best Privilege Escalation Bug

Windows ALPC Elevation of Privilege Vulnerability

Taviso

A vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC). An attacker who successfully exploited this vulnerability could run arbitrary code in the security context of the local system.

cftool exploitCVE-2019-1162