Microsoft Windows 10 1607 and 1703, and Windows Server 2016 allow an authenticated attacker to modify the C:\Users\DEFAULT folder structure, aka "Windows Default Folder Tampering Vulnerability".
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0295