Recently, Google researchers discovered a local privilege escalation vulnerability in Windows which was being used in zero-day attacks, including those carried out by the Pawn Storm espionage group. This is an easily exploitable vulnerability which can be found in all supported versions of Windows, from Windows 7 to Windows 10. By changing one bit, the attacker can elevate the privileges of a thread, giving administrator access to a process that would not have it under normal circumstances.
Post from: Trendlabs Security Intelligence Blog - by Trend Micro
One Bit To Rule A System: Analyzing CVE-2016-7255 Exploit In The Wild