Security researchers have released a proof-of-concept exploit showing how an administrator with elevated privileges can extract passwords from a system and use them for subsequent malicious activities.