Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability

How could an attacker exploit this vulnerability?
To exploit this vulnerability, a victim machine must be running a performance counter collection tool such as Performance Monitor to collect performance counter data from an attacker machine.
An attacker with local admin authority on the attacker machine could run malicious code remotely in the victim machine's performance counter data collector process.

Security updates
10.0.17763.6054 — https://support.microsoft.com/help/5040430
10.0.20348.2582 — https://support.microsoft.com/help/5040437
10.0.22000.3079 — https://support.microsoft.com/help/5040431
10.0.19044.4651 — https://support.microsoft.com/help/5040427
10.0.22621.3880 — https://support.microsoft.com/help/5040442
10.0.25398.1009 — https://support.microsoft.com/help/5040438
10.0.10240.20710 — https://support.microsoft.com/help/5040448
10.0.14393.7159 — https://support.microsoft.com/help/5040434
6.0.6003.22769 — https://support.microsoft.com/help/5040499
6.0.6003.22769 — https://support.microsoft.com/help/5040490
6.1.7601.27219 — https://support.microsoft.com/help/5040497
6.1.7601.27219 — https://support.microsoft.com/help/5040498
6.2.9200.24975 — https://support.microsoft.com/help/5040485
6.3.9600.22074 — https://support.microsoft.com/help/5040456