Azure Yang

An issue exists where concurrent execution using a shared resource with improper synchronization, known as a race condition, allows an authorized attacker to elevate privileges locally. A race condition occurs when the system's behavior depends on the sequence or timing of uncontrollable events.

A use-after-free issue in Winlogon allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed, which can be exploited to execute arbitrary code or gain higher permissions.

A race condition exists in the Windows Diagnostic Policy Service. This occurs when concurrent execution using a shared resource lacks proper synchronization, allowing an authorized attacker to elevate privileges locally.

A heap-based buffer overflow occurs in Winlogon, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a condition where a program writes more data to a heap memory buffer than it can hold, potentially leading to memory corruption.

A stack-based buffer overflow occurs in the Software Protection Platform, which allows an authorized attacker to elevate privileges locally. A stack-based buffer overflow is a condition where a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially overwriting adjacent memory.

A buffer over-read exists in Windows Management Instrumentation, which allows an authorized attacker to disclose sensitive information locally and affect the system. A buffer over-read occurs when a program reads more data from a buffer than it was intended to, potentially exposing adjacent memory contents.

A heap-based buffer overflow exists in the Windows Portable Device File System Driver. This flaw allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially leading to memory corruption.

A heap-based buffer overflow occurs in Winlogon, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruption issue that happens when a program writes more data to a heap-allocated buffer than it can hold.

A type confusion issue occurs when a resource is accessed using an incompatible type. This allows an authorized attacker to locally disclose sensitive information and affect the system.

A heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker located on an adjacent network to execute arbitrary code. A heap-based buffer overflow occurs when an application writes more data to a heap-allocated memory block than it can hold, potentially corrupting adjacent memory.

Name of the Vulnerable Software and Affected Versions: Capability Access Management Service (camsvc) (affected versions not specified) Description: A race condition exists within the Capability Access Management Service (camsvc) due to improper synchronization during concurrent execution using a shared resource. This allows a locally authorized attacker to elevate privileges. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows Message Queuing (affected versions not specified) Description: A use-after-free issue exists in Windows Message Queuing that may allow an unauthorized attacker to execute code over a network. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows LDAP (affected versions not specified) Description: The issue concerns uncontrolled resource consumption in Windows LDAP, allowing an unauthorized attacker to deny service over a network. This can lead to a denial-of-service attack. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows Standards-Based Storage Management Service (affected versions not specified) Description: The issue is related to uncontrolled resource consumption in the Windows Standards-Based Storage Management Service, which allows an unauthorized attacker to deny service over a network. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows Standards-Based Storage Management Service (affected versions not specified) Description: The issue is related to uncontrolled resource consumption in the Windows Standards-Based Storage Management Service, which allows an unauthorized attacker to deny service over a network. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows Cryptographic Services (affected versions not specified) Description: The issue is related to uncontrolled resource consumption in Windows Cryptographic Services, allowing an unauthorized attacker to deny service over a network. This can lead to a denial-of-service condition, affecting the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows Standards-Based Storage Management Service (affected versions not specified) Description: The issue is related to uncontrolled resource consumption, allowing an unauthorized attacker to deny service over a network. This can affect the system, leading to a denial-of-service condition. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows Lightweight Directory Access Protocol (LDAP) (affected versions not specified) Description: An uncontrolled resource consumption issue in Windows Lightweight Directory Access Protocol (LDAP) allows an unauthorized attacker to cause a denial of service over a network. The vulnerability is related to uncontrolled resource usage within the LDAP implementation. Exploitation may allow a remote attacker to cause a denial of service. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is related to insufficient input validation in the Internet Storage Name Service (iSNS) of Windows operating systems. It allows a remote attacker to cause a denial of service.

The issue is related to incorrect code generation management in the HEVC Video Extension codec. It allows a remote attacker to execute arbitrary code using a specially crafted request.