The Intel Content Protection HECI Service exposes a DCOM object to all users and most sandboxes (such as Edge LPAC and Chrome GPU). It has a type confusion vulnerability which can be used to elevate to SYSTEM privileges.
d649e78ec90ab2bb58cabd020a0732e51ddfd767b2218861290b8350505c13e9