Privilege escalation by launching “Help” on Windows-based systems is a frequentlydocumented attack that demonstrates that the product is not dropping or minimizing
privileges, even for non-critical features that are assumed to be benign. However, the
canonical attack of navigating to “cmd.exe” might not be obvious to most.
The “grow-your-own-crypto” vulnerability contradicts advice that has been published for