Chanhee Park

A use-after-free issue in the Windows Kernel allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed.

A buffer over-read in the Windows USB Video Driver allows an authorized attacker to elevate privileges locally. A buffer over-read occurs when a program reads more data from a buffer than it is intended to, potentially exposing sensitive information from adjacent memory locations.

A time-of-check time-of-use (toctou) race condition exists in the Windows Storage Spaces Controller. This flaw allows an authorized attacker to elevate privileges locally. A TOCTOU race condition occurs when a program checks the state of a resource and then acts upon that resource, but the state changes between the check and the action.

An improper access control vulnerability in ESET Endpoint Encryption and ESET Full Disk Encryption allow attacker with standard user permissions access a device interface belonging to a privileged kernel driver and send specially crafted requests.