Dongjun Kim

A time-of-check time-of-use (toctou) race condition exists in Windows Redirected Drive Buffering. This occurs when a program checks the state of a resource before using it, but the state changes between the check and the use. An authorized attacker can exploit this to disclose information locally.

A heap-based buffer overflow occurs in Windows LUAFV, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a condition where a program writes more data to a heap memory buffer than it can hold, potentially leading to memory corruption.

A use-after-free issue in vhdmp.sys allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed.

A heap-based buffer overflow occurs in the Windows Universal Disk Format File System Driver (UDFS). This issue allows an authorized attacker to elevate privileges locally on the system. A heap-based buffer overflow is a memory corruption error that happens when a program writes more data to a heap-allocated buffer than it can hold.

An out-of-bounds read in the Windows Kernel allows an authorized attacker to elevate privileges locally, which can lead to full system compromise.

A use-after-free condition in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an application continues to use a pointer after it has been freed.

A heap-based buffer overflow exists in the Windows Universal Disk Format File System Driver (UDFS). This issue allows an authorized attacker to elevate privileges locally on the system. A heap-based buffer overflow occurs when a program writes more data to a heap-allocated memory block than it can hold, potentially leading to memory corruption.

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

A use after free issue in the Windows SMB Client allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed, which can lead to arbitrary code execution or privilege escalation.

A heap-based buffer overflow occurs in the Windows SMB Client, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a condition where a program writes more data to a heap memory buffer than it can hold, potentially leading to memory corruption.

A race condition occurs in the Windows Fast FAT Driver due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileges locally on the system.

An information disclosure issue occurs when the Windows kernel improperly initializes objects in memory. An authenticated attacker can exploit this by running a specially crafted application to obtain sensitive information, which may be used to further compromise the system.

An out-of-bounds read in the Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. This issue enables attackers to affect the system by gaining higher access levels than intended.

A heap-based buffer overflow occurs in Windows Redirected Drive Buffering. This issue allows an authorized attacker to elevate privileges locally on the system. A heap-based buffer overflow is a memory corruption error that happens when a program writes more data to a heap-allocated buffer than it can hold.

A use-after-free condition in the Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an application continues to use a pointer after it has been freed.

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

A use-after-free condition exists in the Windows exFAT File System. This issue allows an authorized attacker to elevate privileges locally on the system. Use-after-free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed.

A stack-based buffer overflow occurs in the Windows Projected File System. This issue allows an authorized attacker to elevate their privileges locally on the system. A stack-based buffer overflow is a condition where a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially overwriting adjacent memory.

An out-of-bounds read in Windows Text Shaping allows an unauthorized remote attacker to execute arbitrary code over a network, which can affect the system. An out-of-bounds read occurs when a program reads data past the end of the intended buffer, potentially accessing restricted memory.

A heap-based buffer overflow occurs in the Virtual Hard Disk (VHD) Miniport Driver. This issue allows an authorized attacker to elevate privileges locally and affect the system. A heap-based buffer overflow is a memory corruption error that happens when a program writes more data to a heap-allocated buffer than it can hold.