Lilang Wu

The issue is related to unsafe privilege management in the Windows CD-ROM Driver, which can be exploited to elevate privileges. This allows an attacker to affect the system.

A memory corruption issue was addressed with improved input validation, allowing an application to potentially execute arbitrary code with kernel privileges.

A memory corruption issue was addressed with improved memory handling, allowing an application to potentially execute arbitrary code with system privileges.

A memory corruption issue was addressed with improved memory handling, allowing an application to potentially execute arbitrary code with kernel privileges.

A logic issue was addressed with improved restrictions, which may allow a malicious application to determine kernel memory layout.

A validation issue was addressed with improved input sanitization, allowing an application to potentially read restricted memory.

A validation issue was addressed with improved input sanitization, allowing an application to potentially read restricted memory.

A memory corruption issue was addressed with improved memory handling, allowing an application to potentially execute arbitrary code with system privileges. The issue is related to a double free privilege escalation vulnerability in the AMDRadeonX4000 AMDSIGLContext, specifically with the discard StretchTex2Tex function.

A memory corruption issue was addressed with improved memory handling, allowing an application to potentially execute arbitrary code with system privileges. The issue is related to an untrusted pointer dereference privilege escalation.

The issue involves an out-of-bounds read that can be addressed with improved bounds checking. This allows an application to potentially read restricted memory, which could lead to information disclosure.

A validation issue was addressed with improved input sanitization.

The issue involves the `Accounts` component, which allows local users to bypass intended authorization restrictions. This is achieved by leveraging the mishandling of an app uninstall, effectively exploiting errors in the authorization procedure.