C0Rk1

An untrusted pointer dereference occurs in the Windows Encrypting File System (EFS), which allows an authorized attacker to cause a local denial of service. A pointer dereference is a technical error where a program attempts to read or write to a memory address using a pointer that does not point to a valid or intended location.

A heap-based buffer overflow exists in the Microsoft Windows Codecs Library. This issue allows an unauthorized remote attacker to execute arbitrary code over a network, potentially compromising the affected system. A heap-based buffer overflow occurs when a program writes more data to a heap memory buffer than it can hold, which can lead to memory corruption.

A stack-based buffer overflow exists in Visual Studio and .NET that allows an unauthorized attacker to execute code over a network. The issue occurs when loading document specifications from a PDB (Program Database) that references an attacker-influenced COFF (Common Object File Format) object. Specifically, attacker-controlled COFF relocation offsets can cause an out-of-bounds stack write in the `DiaObjectFile::ApplyFixup()` function.

An out-of-bounds read exists in the Windows USB Hub Driver. This issue allows an authorized attacker to disclose sensitive information locally and potentially affect the system. An out-of-bounds read occurs when the software reads data past the end of the intended buffer, potentially accessing adjacent memory locations.

An out of bounds read exists in the Animation component, which could allow a remote attacker to read memory inside the sandbox by using a specially crafted HTML page. An out of bounds read occurs when a program reads data past the end of the intended buffer, potentially exposing sensitive information from adjacent memory locations.