Donghyeon Oh

An out-of-bounds read allows an authorized attacker to disclose sensitive information locally, which can subsequently affect the system.

A null pointer dereference occurs in the Windows DHCP Server, which allows an unauthorized attacker to cause a denial of service over a network. A null pointer dereference is a software error where the program attempts to read from or write to a memory address that is null, typically leading to a system crash.

A heap-based buffer overflow in the Windows USB Printing Stack `usbprint.sys` allows an unauthorized attacker to elevate privileges. This issue can be exploited through a physical attack.

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A buffer over-read issue in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally. This issue affects Virtual Hard Disk (VHDX), enabling an attacker to gain elevated privileges. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A buffer over-read issue in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally. This issue affects Virtual Hard Disk (VHDX), enabling an attacker to gain elevated privileges on the local system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 12.1.1 tvOS versions prior to 12.1.1 watchOS versions prior to 5.1.2 Safari versions prior to 12.0.2 iTunes for Windows versions prior to 12.9.2 iCloud for Windows versions prior to 7.9 Description: Multiple memory corruption issues were addressed with improved memory handling. Recommendations: For iOS versions prior to 12.1.1, update to version 12.1.1 or later. For tvOS versions prior to 12.1.1, update to version 12.1.1 or later. For watchOS versions prior to 5.1.2, update to version 5.1.2 or later. For Safari versions prior to 12.0.2, update to version 12.0.2 or later. For iTunes for Windows versions prior to 12.9.2, update to version 12.9.2 or later. For iCloud for Windows versions prior to 7.9, update to version 7.9 or later.

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 12.1 tvOS versions prior to 12.1 watchOS versions prior to 5.1 Safari versions prior to 12.0.1 iTunes versions prior to 12.9.1 iCloud for Windows versions prior to 7.8 Description: A memory corruption issue was addressed with improved validation. Recommendations: For iOS versions prior to 12.1, update to version 12.1 or later. For tvOS versions prior to 12.1, update to version 12.1 or later. For watchOS versions prior to 5.1, update to version 5.1 or later. For Safari versions prior to 12.0.1, update to version 12.0.1 or later. For iTunes versions prior to 12.9.1, update to version 12.9.1 or later. For iCloud for Windows versions prior to 7.8, update to version 7.8 or later.

Multiple memory corruption issues were addressed with improved memory handling.

Multiple memory corruption issues were addressed with improved memory handling.