> These numbers are seem pretty low compared to what I was able to achieve specifically around windows kernel, win32k<->win32u to be exact.

Care to give more context to this? Seems interesting

Priviledge escalation from a non admistrative user, best way I could describe it is type confusion, writing values in a kernelmode structure with an api that was not designed for it. For example instead of writing window data, you write priviledge data.