A local privilege boundary is the line that separates what an ordinary user process can do from what the operating system reserves for elevated accounts, services, or the SYSTEM context. On Windows, crossing that boundary can turn a harmless-looking foothold into full control of the machine. Security bugs that break this boundary are called local privilege escalation vulnerabilities.
This boundary matters because many attacks begin with only standard-user access: a malicious download, a shared workstation account, or another low-privileged compromise. If an attacker can cross into SYSTEM, they may disable defenses, create services, steal credentials, or establish persistence. Defenders treat software that enforces access decisions, such as endpoint analysis or remote-access clients, as part of the trust perimeter. A flaw in that software can weaken the boundary it is supposed to protect, so patching, privilege separation, and monitoring for unusual high-privilege local activity are critical.