6Ucy

A use-after-free condition exists in the Windows Network Connection Broker. This allows an authorized attacker to elevate privileges locally on the system. Use-after-free is a memory corruption issue that occurs when an application continues to use a pointer after it has been freed.

A heap-based buffer overflow occurs in the Windows Program Compatibility Assistant Service. This issue allows an authorized attacker to elevate privileges locally on the system. A heap-based buffer overflow is a memory corruption error that happens when a program writes more data to a heap-allocated buffer than it can hold.

A use after free issue in the Windows Link Layer Topology Discovery Protocol allows an unauthorized attacker to execute arbitrary code over an adjacent network, which can affect the system. Use after free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed.

A stack-based buffer overflow in Windows COM allows an authorized attacker to elevate privileges locally. A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially overwriting adjacent memory.

Weak authentication in the Windows App Readiness Service allows an authorized attacker to perform local tampering, which can enable them to affect the system.

A buffer over-read exists in Servicing Stack Updates, which allows an authorized attacker to locally disclose sensitive information and affect the system. A buffer over-read occurs when a program reads more data from a buffer than it is intended to, potentially accessing adjacent memory locations.