Matthew Cox

**Name of the Vulnerable Software and Affected Versions** Windows HTTP.sys (affected versions not specified) **Description** An issue exists in Windows HTTP.sys where an untrusted pointer dereference can allow a locally authenticated attacker to gain elevated privileges. The issue allows attackers to affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows HTTP.sys (affected versions not specified) **Description** A time-of-check time-of-use (TOCTOU) race condition exists in Windows HTTP.sys. This condition can be exploited by an authorized attacker to gain elevated privileges on a local system. The issue involves a flaw in how the system verifies conditions between the time a check is performed and the time the result of that check is used. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows HTTP.sys (affected versions not specified) **Description** An issue exists in Windows HTTP.sys where an untrusted pointer dereference can lead to local privilege escalation. An authorized attacker can exploit this to gain elevated privileges on a system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Nome do Software Vulnerável e Versões Afetadas: Windows Internet Information Services (versões afetadas não especificadas) Descrição: Existe um problema de leitura fora dos limites no Windows Internet Information Services, potencialmente permitindo que um atacante não autorizado cause uma condição de negação de serviço pela rede. Este problema pode afetar o sistema, levando a uma negação de serviço. Recomendações: No momento, não há informações sobre uma versão mais recente que contenha uma correção para esta vulnerabilidade.