An unquoted search path flaw was found in the way qemu guest agent service for Windows was installed into the system.
A local unprivileged user could use this flaw to increase their privileges.
References:
http://cwe.mitre.org/data/definitions/428.html
Acknowledgements:
This issue was discovered by Lev Veyde of Red Hat.