Dan Reynolds

Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature locally.

A use-after-free issue in the Advanced Local Procedure Call (ALPC) mechanism allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed.

The issue is an out-of-bounds read that allows an authorized attacker to disclose information locally.

A buffer over-read issue in Windows Storage Management Provider allows an authorized attacker to disclose information locally.

Name of the Vulnerable Software and Affected Versions: Windows Common Log File System Driver versions prior to the fixed version Description: The issue is related to a use-after-free flaw in the Windows Common Log File System Driver, which allows an authorized attacker to elevate privileges locally. This could potentially impact system security. Recommendations: For Windows 10 and 11, apply patch KB5058411. For Windows Server, apply patch KB5058405. As a temporary workaround, consider restricting access to the Windows Common Log File System Driver until a patch is applied.

Name of the Vulnerable Software and Affected Versions: Windows Routing and Remote Access Service (RRAS) (affected versions not specified) Description: The issue is related to a buffer overflow in dynamic memory, which can be exploited to execute arbitrary code. This allows remote attackers to affect the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows Routing and Remote Access Service (RRAS) (affected versions not specified) Description: The vulnerability in Windows Routing and Remote Access Service (RRAS) is related to a buffer overflow in dynamic memory. This issue can be exploited by a remote attacker to execute arbitrary code. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is related to an elevation-of-privilege vulnerability in the Windows Resilient File System (ReFS). It is caused by a buffer overflow in memory, allowing an attacker to potentially gain elevated privileges. This vulnerability can be exploited to affect the system.