Previous

Escalation path

UAC bypass
Binary hijacking / Insecure File permissions
Unquoted Service path
Kernel Exploit
Potato attack (SEimpersonation)
DLL/EXE Hijacking
Service Binary hijacking
Exploit msi file