Ranchoice

يسمح تجاوز سعة المخزن المؤقت المستند إلى كومة (heap-based buffer overflow) في Windows LUAFV لمهاجم مصرح له برفع الامتيازات محليًا. يحدث تجاوز سعة المخزن المؤقت المستند إلى الكومة عندما يقوم برنامج بكتابة بيانات في مخزن مؤقت لذاكرة الكومة أكثر مما يمكنه استيعابه، مما قد يؤدي إلى تلف الذاكرة.

تتعلق المشكلة بحدوث تجاوز سعة المخزن المؤقت في الذاكرة، وهو ما يمكن استغلاله لرفع مستوى الامتيازات. وقد يتيح ذلك للمهاجم التأثير على النظام. لم يتم تقديم أي معلومات حول العدد التقديري للأجهزة التي قد تكون متأثرة في جميع أنحاء العالم أو الحوادث الفعلية التي تم فيها استغلال هذه المشكلة.

Name of the Vulnerable Software and Affected Versions: Windows Kernel (affected versions not specified) Description: The issue is related to a buffer overflow on the stack in the Windows Kernel component of the Microsoft Windows operating system. This can allow an attacker to elevate their privileges. An elevation-of-privilege vulnerability exists, enabling attackers to impact the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is related to insufficient access control in the Windows Cloud Files Mini Filter driver, which can be exploited to elevate privileges. This could allow an attacker to affect the system.

The issue is related to insufficient access control in the Windows Cloud Files Mini Filter driver, which can be exploited to elevate privileges. This could allow an attacker to affect the system.

The issue is related to insufficient access control in the Win32k component of the Windows operating system. It allows an attacker to elevate their privileges.

The issue is related to an information disclosure vulnerability in the win32k component of Microsoft Windows operating systems. This vulnerability can be exploited to reveal protected information. There is no information available about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

The issue is related to the Microsoft RemoteFX Virtual GPU miniport driver's handling of objects in memory, which can lead to an elevation of privilege. This allows an attacker to potentially execute arbitrary code with elevated privileges.

The issue is caused by a buffer overflow in the Win32k component of Windows operating systems, which can be exploited to elevate privileges and gain full control over the system using a specially crafted application. This is due to the Win32k component's failure to properly handle objects in memory.

The issue is related to errors in object handling in memory within the DirectX Graphics Kernel (DXGKRNL) of Windows operating systems. It allows an attacker to potentially elevate their privileges. The vulnerability can be exploited through out-of-bounds memory access in the BasicRender Driver, specifically affecting the D3DKMTSubmitCommand function.

The issue is related to errors in object handling in memory within the DirectX Graphics Kernel (DXGKRNL) driver of Windows operating systems. It may allow an attacker to escalate privileges using a specially crafted application. The vulnerability can be exploited to affect the system.

The issue is related to errors in object handling in memory within the DirectX Graphics Kernel (DXGKRNL) driver of Windows operating systems. It allows an attacker to potentially elevate their privileges using a specially crafted application. This can affect the system, enabling attackers to gain higher access levels.

The issue is related to an information disclosure problem. It occurs when the Windows kernel fails to properly initialize objects in memory. This can allow attackers to obtain sensitive information and potentially affect the system.