A. Temp directories are world writable thus allowing attackers a place to drop, stage, and execute malware on a system without needing to worry about file permissions.

B. Temp directories contain the system page file and the virtual memory file, meaning the attacker can use their malware to read the in memory values of running programs.

C. Temp directories aren't owned by any particular user, making it difficult to track the process owner when files are executed.

D. Temp directories are flagged as non-executable, meaning that no files stored within can be executed, and this executable was run from that directory.