Type Confusion in Content Protection HECI Service in Intel Graphics Driver allows unprivileged user to elevate privileges via local access.
https://www.exploit-db.com/exploits/43373/
https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00095&languageid=en-fr