Zer0Mem

The issue is related to insecure privilege management in the Windows SMBv2 component, allowing a remote attacker to execute arbitrary code by sending a specially crafted packet to the SMBv2 server. This can be achieved through the exploitation of how the Microsoft Server Message Block 2.0 (SMBv2) server handles certain requests. The vulnerability enables remote attackers to execute arbitrary code and affect the system.

The issue is related to an information disclosure problem. It occurs when Windows Hyper-V fails to properly validate input from an authenticated user on a guest operating system. This could allow an attacker to obtain sensitive information and affect the system's confidentiality.

A denial of service issue exists in the Microsoft Server Block Message (SMB) due to insufficient input validation. This allows an attacker to send specially crafted requests to the server, potentially causing a denial of service. The issue can be exploited by a remote attacker using specially formed SMB requests to the server.

The issue is caused by insufficient input validation in the network switch of Microsoft Hyper-V on Windows operating systems. It may allow an attacker to cause a denial-of-service of the host operating system from a guest operating system using a specially crafted application.

The issue exists due to insufficient input validation from a privileged user in the guest operating system, allowing a remote attacker to execute arbitrary code. This can be exploited by a remote attacker to gain control over the system.

An elevation-of-privilege issue allows attackers to affect the system.

An elevation-of-privilege issue allows attackers to affect the system.

The issue is related to the mishandling of unsuccessful crypto registration in conjunction with successful key-type registration. This can be exploited by local users to cause a denial of service, resulting in a NULL pointer dereference and panic, or possibly have other unspecified impacts. The exploitation is possible via a crafted application that uses the big key data type.