Chen Le Qi

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V (affected versions not specified) Description: A race condition exists due to concurrent execution using a shared resource with improper synchronization. This allows an authorized attacker to elevate privileges locally. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V (affected versions not specified) Description: An improper access control issue exists in Windows Hyper-V that may allow a locally authorized attacker to elevate privileges. This can affect the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows Cloud Files Mini Filter Driver (affected versions not specified) Description: The Windows Cloud Files Mini Filter Driver exhibits improper handling of insufficient permissions or privileges, potentially allowing a local attacker to elevate their privileges. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Microsoft Windows 11 (affected versions not specified) Description: Concurrent execution using a shared resource with improper synchronization (a 'race condition') in Windows Hyper-V allows an authorized attacker to elevate privileges locally. This issue is a use-after-free condition within the `vhdmp` component. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V (affected versions not specified) Description: A numeric truncation error exists in Windows Hyper-V that may allow an authorized attacker to elevate privileges locally. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

An elevation-of-privilege issue exists in Windows Event Tracing due to the dereferencing of untrusted pointers. This allows an authorized attacker to elevate their privileges locally on the system.

Name of the Vulnerable Software and Affected Versions: Windows Event Tracing (affected versions not specified) Description: The issue is related to a use after free condition in Windows Event Tracing, which allows an authorized attacker to elevate privileges locally. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows Telephony Service (affected versions not specified) Description: The issue is related to an elevation-of-privilege vulnerability in the Windows Telephony Service, which is caused by a buffer overflow in the heap. This vulnerability can be exploited by an attacker to elevate their privileges. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.