Improper authorization in Microsoft PowerToys allows an authorized attacker to elevate privileges locally.