Anemone

An integer underflow (wrap or wraparound) occurs in the Windows Update Stack. This issue allows an authorized attacker to disclose sensitive information locally and affect the system. Integer underflow is a condition where a subtraction operation results in a value smaller than the minimum representable value for the data type, causing it to wrap around to a very large positive number.

A heap-based buffer overflow occurs in the Windows Camera Frame Server Monitor. This issue allows an authorized attacker to elevate privileges locally on the system. A heap-based buffer overflow is a memory corruption error that happens when a program writes more data to a heap-allocated buffer than it can hold.

A release of an invalid pointer or reference in Windows iSCSI enables an unauthorized attacker to execute arbitrary code over a network. This issue allows for remote code execution without requiring authentication.

A heap-based buffer overflow occurs in the Windows DHCP Client. This issue allows an authorized attacker to elevate privileges over an adjacent network. A heap-based buffer overflow is a memory corruption error that happens when a program writes more data to a heap-allocated buffer than it can hold.

A heap-based buffer overflow occurs in Windows Management Instrumentation, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruption issue that happens when a program writes more data to a heap-allocated buffer than it can hold.

An out-of-bounds write occurs in the Windows Kernel, which allows an authorized attacker to elevate privileges locally and affect the system. An out-of-bounds write is a condition where the software writes data past the end of the intended buffer, potentially corrupting memory.

A heap-based buffer overflow occurs in the Windows AppX Package Manager. This issue allows an authorized attacker to elevate privileges locally on the system. A heap-based buffer overflow is a memory corruption error that happens when a program writes more data to a heap-allocated buffer than it can hold.

A heap-based buffer overflow in Windows Storage allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system. A heap-based buffer overflow occurs when a program writes more data to a heap memory buffer than it can hold, potentially overwriting adjacent memory.

A stack-based buffer overflow occurs in the Software Protection Platform, which allows an authorized attacker to elevate privileges locally. A stack-based buffer overflow is a condition where a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially overwriting adjacent memory.

A heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system. A heap-based buffer overflow occurs when a program writes more data to a heap memory buffer than it can hold, potentially overwriting adjacent memory.

A double free issue in Windows Message Queuing allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system. A double free occurs when the program attempts to free the same memory location twice, potentially leading to memory corruption.

A double free issue in Windows Message Queuing allows an unauthorized attacker to execute code over a network. A double free occurs when an application attempts to free the same memory location twice, which can lead to memory corruption.

A use after free issue exists in Windows Update Delivery Optimization. This allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed, which can lead to arbitrary code execution or privilege escalation.

A use after free issue in the Windows Update Service allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed.

A stack-based buffer overflow exists in the Windows DHCP Server, which allows an authorized attacker to execute arbitrary code over a network and affect the system. A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially overwriting adjacent memory.

A use after free issue exists in the Windows DHCP Client. This allows an unauthorized attacker on an adjacent network to execute arbitrary code and affect the system. Use after free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed.

A heap-based buffer overflow occurs in the Windows Partition Management Driver. This issue allows an unauthorized attacker to elevate privileges over a network. A heap-based buffer overflow is a memory corruption error that happens when a program writes more data to a heap-allocated buffer than it can hold.

A heap-based buffer overflow exists in the Windows Volume Manager Extension Driver. This issue allows an unauthorized remote attacker to execute arbitrary code over a network and affect the system. A heap-based buffer overflow occurs when a program writes more data to a heap memory buffer than it can hold, potentially overwriting adjacent memory.

A race condition occurs due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileges locally on the system.

Integer wraparound in multiple server features allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds. This can lead to arbitrary code execution as the operating system user running the database. In applications that pass gigabyte-scale user inputs to the relevant database functions, the input provider may cause a segmentation fault, which is an error occurring when a program attempts to access a memory location that it is not allowed to access.