Attacker with local access could escalate privileges, Microsoft warns; analyst calls it ‘the most urgent concern’ this month.