Wenqunwang

تسمح مشكلة «الاستخدام بعد التحرير» (use after free) في Windows Win32K - GRFX لمهاجم مخول برفع مستوى امتيازاته محليًّا. «الاستخدام بعد التحرير» هو عيب في تلف الذاكرة يحدث عندما يستمر أحد التطبيقات في استخدام مؤشر بعد تحريره، وهو ما يمكن استغلاله لتنفيذ تعليمات برمجية عشوائية أو الحصول على أذونات أعلى في النظام.

تحدث حالة تنافس في Windows Win32K - GRFX بسبب عدم التزامن الصحيح عند استخدام مورد مشترك. وهذا يسمح لمهاجم مخول برفع مستوى الامتيازات محليًا. حالة التنافس هي حالة يعتمد فيها السلوك الجوهري للنظام على تسلسل أو توقيت أحداث أخرى لا يمكن التحكم فيها.

Name of the Vulnerable Software and Affected Versions: Windows Server DHCP (affected versions not specified) Description: An information disclosure issue exists due to the improper disclosure of memory contents by the Windows Server DHCP service. This can be exploited by an unauthenticated attacker sending a specially crafted packet to an affected DHCP server, potentially obtaining information to further compromise the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is related to insecure privilege management in the Windows Security Health Service, allowing an attacker to elevate their privileges. To exploit this, an attacker would first need to log on to the system. This could potentially affect the system by allowing attackers to gain higher privileges.

The issue is related to a use-after-free vulnerability in the virtual sound device of the affected products. This vulnerability can potentially allow an attacker to execute arbitrary code.

The issue is related to an elevation of privilege vulnerability in the Win32k component of Windows, which fails to properly handle objects in memory. This can allow an attacker to elevate their privileges and potentially execute arbitrary code in kernel mode using a specially crafted application. The vulnerability may be exploited by attackers to affect the system.

The issue is related to the improper handling of objects in memory by the Windows kernel, which can lead to the disclosure of protected information. An attacker could exploit this by using a specially crafted application to reveal sensitive information.

An elevation-of-privilege issue allows attackers to affect the system.