CVE-2017-0295

Microsoft Windows 10 1607 and 1703, and Windows Server 2016 allow an authenticated attacker to modify the C:UsersDEFAULT folder structure, aka “Windows Default Folder Tampering Vulnerability”.