Bochengxiang

An out-of-bounds read exists in the Windows Device Association Service. This allows an authorized attacker to disclose sensitive information locally, which may subsequently affect the system.

A buffer over-read in the Windows StateRepository API allows an authorized attacker to disclose sensitive information locally, which can affect the system.

A use-after-free condition in the Windows StateRepository API allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an application continues to use a pointer after it has been freed.

The issue is related to improper link resolution before file access, also known as 'link following', which allows an authorized attacker to elevate privileges locally. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

Name of the Vulnerable Software and Affected Versions: Windows Deployment Services (affected versions not specified) Description: A denial-of-service issue allows attackers to affect the system. This issue is related to the Windows Deployment Services. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.