Thomas Imbert

The issue is related to an elevation-of-privilege vulnerability in the NT OS Kernel, which can be exploited by attackers to affect the system. It is associated with the dereference of an untrusted pointer.

The issue allows attackers to gain System privileges on a vulnerable machine. It is an elevation-of-privilege vulnerability that affects the system. The vulnerability is related to an untrusted pointer dereference in the mskssrv.sys driver. It has been actively exploited and was demonstrated at the Pwn2Own contest. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added this vulnerability to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.

The issue is related to an embedded web server command injection vulnerability. This vulnerability was identified in Lexmark devices through 2021-12-07. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where this issue was exploited.

The initial admin account setup wizard on Lexmark devices allows unauthenticated access to the "out of service erase" feature. This issue may be related to an unprotected API, potentially leading to remote code execution.

The issue is related to a buffer overflow, allowing a remote attacker to access confidential data, compromise its integrity, and cause a denial of service. A content process could modify shared memory, leading to an out-of-bounds write, memory corruption, and a potentially exploitable crash.

A race condition occurs during the initialization of a new content process, potentially allowing a content process to disclose heap addresses from the parent process. This issue is specific to Windows and does not affect other operating systems. The vulnerability is related to synchronization errors when using shared resources, which could allow a remote attacker to disclose protected information.

The issue is related to a memory corruption problem that can occur during the initialization of a new content process, potentially leading to a crash in the parent process. This problem is specific to Windows and does not affect other operating systems. The vulnerability is also described as a buffer overflow issue that could allow a remote attacker to execute arbitrary code.

The issue is related to an elevation of privilege vulnerability that occurs when the Windows kernel fails to properly handle objects in memory. This vulnerability can be exploited by an attacker to elevate their privileges.

A race condition in the crash generation server can lead to a use-after-free in the main process, potentially causing an exploitable crash and a sandbox escape. This issue affects Windows operating systems exclusively, with other operating systems being unaffected.

The issue exists due to improper handling of objects in memory by a component of the Windows operating system, specifically related to DirectX. This can allow an attacker to elevate their privileges and execute arbitrary code in kernel mode using a specially crafted application. An elevation-of-privilege issue allows attackers to affect the system.

The issue allows a remote DNS server to respond with a custom crafted DNS NSEC resource record, triggering an infinite loop in the `dns packet read type window()` function of the 'systemd-resolved' service. This can cause a denial of service (DoS) of the affected service.