@wdormann since anybody can create a folder on the root on C:, that might actually be exploitable before the patch is installed