Windows-heavy collection closes out a year of elevation-of-privilege vulnerabilities