On Microsoft Windows, the check for an AC token when impersonating the anonymous token does not check impersonation token's security level leading to impersonating a non-AC anonymous token leading to privilege escalation.
25a65ee6cfd0f1fa9da6eec73313f59622aaad24e48dd564fccff23fab03b387