A new Windows User Account Control bypass technique can fly under the radar of security solutions that monitor for this type of circumvention. Windows UAC is a type of security policy setting also designed to prevent malware or malicious software from installing itself on a PC. Microsoft doesn’t view bypassing the UAC as a security vulnerability, despite doing so is a common tactic employed by attackers who wish to gain administrative privileges on targeted PCs in conjunction with surreptitious malware infections. The bypass technique works on Windows 10 systems, and as opposed a number of other UAC bypasses techniques, this one does not raise red flags because it doesn’t rely on a privileged file copy or code injection.
Source: https://threatpost.com/windows-uac-bypass-leaves-systems-open-to-malicious-dlls/119468/