Daejin Lee

Null pointer dereference in Microsoft Defender allows an unauthorized attacker to execute code over a network.

An out-of-bounds read in Windows HTTP.sys allows an authorized attacker to disclose sensitive information locally and affect the system. An out-of-bounds read occurs when the software reads data past the end of the intended buffer, potentially accessing memory that should be restricted.

A heap-based buffer overflow occurs in the Windows DHCP Server, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruption issue that happens when a program writes more data to a heap-allocated memory block than it can hold.

An out-of-bounds read in the Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose sensitive information locally.

An issue in the Windows Kernel involving the release of an invalid pointer or reference allows an authorized attacker to elevate privileges locally. This elevation-of-privilege allows attackers to affect the system.

An authorized attacker can locally disclose information due to the use of an uninitialized resource within the Windows Print Spooler Components.

Missing authentication for a critical function in the Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally to SYSTEM. Low-privileged code with access to the Windows diagnostics workflow can trigger a trusted Event Tracing for Windows (ETW) event containing an attacker-controlled Lua module path. The `whesvc` service can then execute that module through WinDiag without properly validating the producer or restricting the module location.

An out-of-bounds read in the Windows Kernel allows an authorized attacker to disclose information locally. An out-of-bounds read occurs when the software reads data past the end of the intended buffer, potentially exposing sensitive memory contents.

The issue is related to a buffer overflow in memory, which can be exploited to elevate privileges. This allows an attacker to affect the system. There is no information provided about the estimated number of potentially affected devices or real-world incidents where this issue was exploited.

The issue is related to insufficient input validation in Microsoft Defender, which can be exploited by a remote attacker to cause a denial of service.

Name of the Vulnerable Software and Affected Versions: Windows Graphics Component (affected versions not specified) Description: The issue is related to errors in processing objects in memory within the Windows Graphics Component. It may allow an attacker to disclose protected information. The vulnerability can be exploited to obtain sensitive information and affect the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is related to incorrect handling of objects in memory, which can be exploited by running a specially crafted application, allowing an attacker to elevate their privileges. This can affect the system.

The issue allows remote attackers to execute arbitrary code via a crafted packet. This is related to "Improper Indexing" and triggers an out-of-bounds read in the lazy bdecode function.