6. of Elevation of Privilege

An attacker could take advantage of .NET permissions you ask for but don’t use.

Or the alternative text:

An attacker could take advantage of permissions you set but don’t use.

Threat
	You’ve given the service user that launches your application permission to read and write to the file system, but they only need to have read access; consequently, because of a flaw in your application, an attacker may overwrite critical system files.
CAPEC	CAPEC-180 – Exploiting incorrectly configured access control security levels
ASVS	10.2.2 – Check that only required permissions are assigned
CWE	CWE-276 – Incorrect default permissions

...