Divya Sundar

A missing authentication check for a critical function allows an authorized attacker to elevate privileges locally on the system.

A heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially leading to memory corruption.

An absolute path traversal issue exists in the Microsoft Windows Search Component. This flaw allows an authorized attacker to elevate privileges locally on the system.

A time-of-check time-of-use (toctou) race condition exists in the Windows Cloud Files Mini Filter Driver. This occurs when a system checks a condition (such as a security credential) and then uses the result of that check, but the condition changes between the check and the use. An authorized attacker can exploit this to elevate privileges locally.

A heap-based buffer overflow exists in the Windows Common Log File System Driver. This flaw allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program writes more data to a heap memory buffer than it can hold, potentially leading to memory corruption.

A heap-based buffer overflow occurs in the Virtual Hard Disk (VHD) Miniport Driver. This issue allows an authorized attacker to elevate privileges locally and affect the system. A heap-based buffer overflow is a memory corruption error that happens when a program writes more data to a heap-allocated buffer than it can hold.

A use-after-free condition exists that allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an application continues to use a pointer after it has been freed.

A use after free issue exists in Windows Installer. This allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed, which can lead to arbitrary code execution or privilege escalation.

A use-after-free condition exists in Windows Installer, which allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an application continues to use a pointer after it has been freed.

A use-after-free condition in the Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an application continues to use a pointer after it has been freed.

A heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program writes more data to a heap memory buffer than it can hold, potentially leading to memory corruption.