Local privileges are the permissions a user or process already has on a device. They usually come from a standard account, a service account, or another low-trust context, and they sit below full administrator rights. In Windows security, that distinction matters because many protections assume an attacker starts with little access.
Attackers often look for flaws that turn local privileges into something stronger. A privilege-escalation bug can let a limited account gain broader control, while a security-bypass issue can weaken a defense such as BitLocker or another system control. Defenders care about local privileges because they show how much an intruder can do after initial compromise, such as phishing, a malicious attachment, or a stolen login. Keeping privileges minimal, monitoring for unusual elevation, and patching operating-system flaws all reduce the value of a local foothold.