Three high-severity Windows CVEs in AOMEI products put kernel drivers, local access, and SYSTEM-level risk in the same frame.