Cbwang505

An issue in the Windows Client Side Caching driver (csc.sys) allows an authorized attacker to locally disclose sensitive information to an unauthorized actor. Additionally, this flaw can be used to achieve elevation of privilege, allowing attackers to affect the system.

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V (affected versions not specified) Description: An integer overflow or wraparound in Windows Hyper-V can allow a locally authorized attacker to elevate privileges. This issue allows attackers to affect the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is related to insufficient access restrictions in the Microsoft .NET Framework, allowing a remote attacker to elevate their privileges. To exploit this, an attacker must first access the local machine and then run a malicious program. The vulnerability is addressed by correcting how .NET Framework activates COM objects.