Phan Thanh Duy

The issue is related to improper privilege control in the RazerCentralSerivce Named Pipe, allowing a malicious actor with local access to gain SYSTEM privilege. This can be achieved by communicating with the named pipe as a low-privilege user and triggering an insecure .NET deserialization.

The issue is related to improper privilege control in the RazerCentralService Named Pipe, allowing a malicious actor with local access to gain SYSTEM privilege. This can be achieved by communicating with the named pipe as a low-privilege user and calling the `AddModule` or `UninstallModules` command to execute an arbitrary executable file.

This issue allows network-adjacent attackers to disclose sensitive information on affected installations. Authentication is not required to exploit this issue. The specific flaw exists within the "msprox" endpoint. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other issues to execute arbitrary code in the context of root.

The issue is related to an elevation-of-privilege vulnerability in the Windows Hyper-V system, which is caused by flaws in the authorization procedure. This vulnerability can be exploited to allow an attacker to elevate their privileges.

The issue is related to a component of Microsoft Windows, specifically Media Foundation, and involves the disclosure of information. Exploitation of this issue could allow an attacker to reveal protected information. It affects the system by allowing attackers to obtain sensitive information.

The issue is related to incorrect code generation management in the Media Foundation component of Microsoft Windows. It allows remote attackers to execute arbitrary code by sending a specially crafted request. This can affect the system.