Are the permissions necessary to add a key to the local trusted store significantly less powerful than the permissions necessary to modify kernel memory?

For instance, can adding a key to the local trusted store allow someone to forge a windows update?