An elevation of privilege vulnerability exists when Windows improperly allows web content to load from the Windows lock screen. To exploit the vulnerability, an attacker with physical access to a userÆs computer could either connect to a maliciously configured WiFi hotspot or insert a mobile broadband adaptor in the userÆs computer. An attacker who successfully exploited the vulnerability could potentially execute code on a user’s locked computer.

Further information on this exploit is available at : MS16-112