Microsoft Windows NtImpersonateAnonymousToken AC To Non-AC Privilege Escalation

On Microsoft Windows, the check for an AC token when impersonating the anonymous token does not check impersonation token’s security level leading to impersonating a non-AC anonymous token leading to privilege escalation.
Source: Microsoft Windows NtImpersonateAnonymousToken AC To Non-AC Privilege Escalation