Tongqing Zhu

O problema está relacionado a uma vulnerabilidade de elevação de privilégios no Kernel do Windows, que pode ser causada por um estouro de buffer. Essa vulnerabilidade permite que um invasor possa aumentar seus privilégios no sistema. Não há informações disponíveis sobre o número estimado de dispositivos potencialmente afetados em todo o mundo ou sobre incidentes reais em que esse problema tenha sido explorado.

The issue is related to errors in connection handling within the Windows AppX Deployment Server component of Windows operating systems. It allows an attacker to potentially elevate their privileges using a specially crafted application.

The issue is related to errors in privilege management in the Git component of Microsoft Visual Studio. It allows an attacker to elevate their privileges. An attacker who successfully exploits the issue could execute code in the context of another local user. To exploit, an authenticated attacker would need to modify Git configuration files on a system and then convince another user to execute specific Git commands.

The issue is related to an incorrectly repaired stored XSS vulnerability. An attacker can exploit this to inject Node.js code under Present mode. After a victim opens an affected note under Present mode, the attacker can read the victim's files and achieve remote execution of commands on the victim's computer.

An issue allows an attacker to read any file on the server that the web server's user can access when the AllowArbitraryServer configuration setting is set to true. This is related to the mysql.allow local infile PHP configuration and the inadvertent ignoring of `options(MYSQLI OPT LOCAL INFILE)` calls.