Do Young Park

An out-of-bounds read occurs in the Windows WLAN Service, which allows an unauthorized attacker located on an adjacent network to cause a denial of service, affecting the system's availability.

A heap-based buffer overflow occurs in Windows Management Instrumentation, which allows an unauthorized attacker to execute arbitrary code locally or remotely, potentially affecting the entire system. A heap-based buffer overflow is a memory corruption issue that happens when a program writes more data to a heap-allocated memory block than it can hold.

The use of an uninitialized resource in Windows Installer allows an unauthorized attacker to disclose sensitive information over a network, which can subsequently affect the system.

An integer overflow or wraparound in Microsoft Color Management enables an unauthorized attacker to execute arbitrary code over a network. This issue allows for remote code execution without requiring user authentication.

A heap-based buffer overflow occurs in the Windows AppX Package Manager. This issue allows an authorized attacker to elevate privileges locally on the system. A heap-based buffer overflow is a memory corruption error that happens when a program writes more data to a heap-allocated buffer than it can hold.

A use-after-free issue, which occurs when a program continues to use a pointer after it has been freed, was addressed with improved memory management. Processing maliciously crafted web content may lead to an unexpected process crash.

A heap-based buffer overflow in the Windows Client-Side Caching (CSC) Service allows an unauthorized attacker to elevate privileges over a network. A heap-based buffer overflow occurs when a program writes more data to a heap memory buffer than it can hold, potentially leading to memory corruption.

Processing maliciously crafted web content may lead to an unexpected Safari crash due to improper memory handling. This issue involves memory corruption during the processing of web content across multiple Apple operating systems.