An attacker who had already achieved remote code execution (RCE) could exploit this vulnerability to elevate privileges. They then downloaded and ran a CVE-2016-0167 exploit to run subsequent code as SYSTEM