Erik Egsgard

A null pointer dereference in Windows Redirected Drive Buffering allows an authorized attacker to cause a local denial of service, which can lead to system crashes or connection failures.

The Foxit PDF Editor/Reader update service loads system libraries from a search path that includes directories writable by low-privileged users. This allows a local attacker to place a malicious DLL in a writable directory, which the update service may load with SYSTEM privileges, resulting in local privilege escalation and arbitrary code execution. The vulnerability is a DLL search-order hijack, where the service loads a malicious DLL instead of a legitimate one. This can lead to full local compromise, persistence, lateral movement, and data exposure, especially on shared workstations, terminal servers, and VDI images.

Name of the Vulnerable Software and Affected Versions: Windows (affected versions not specified) Description: An integer overflow or wraparound in Windows SPNEGO Extended Negotiation can allow an authorized attacker to elevate privileges locally. This issue allows attackers to affect the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows Remote Desktop Services (affected versions not specified) Description: An uncontrolled resource consumption issue in Windows Remote Desktop Services can allow an unauthorized attacker to cause a denial of service over a network. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows (affected versions not specified) Description: The issue concerns a heap-based buffer overflow in the Windows Cred SSProvider Protocol. This allows an authorized attacker to elevate privileges locally. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where this issue was exploited. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is related to improper access control, which could allow an unauthorized attacker to deny service over a network. This could potentially leave systems vulnerable.

The issue is related to uncontrolled resource consumption in the Lightweight Directory Access Protocol (LDAP) of Microsoft Windows operating systems. This can be exploited by a remote attacker to cause a denial of service. The protocol allows an unauthorized attacker to deny service over a network.

The issue is related to a buffer overflow in dynamic memory within the Cryptographic service of Windows operating systems. This can be exploited by a remote attacker to execute arbitrary code, potentially affecting the system.

The issue is related to insufficient input validation in Windows Cryptographic Services, which can be exploited to execute arbitrary code. This allows remote attackers to affect the system. There are reports of potential exploitation, but details about the estimated number of affected devices or real-world incidents are not provided.

The issue is related to an elevation-of-privilege vulnerability in the Windows CSC Service, which can be exploited due to improper address validation in IOCTL with METHOD NEITHER I/O Control Code in the csc.sys driver. This vulnerability allows attackers to gain SYSTEM privileges. A proof-of-concept (PoC) exploit has been released on GitHub. The vulnerability was initially considered to have a lower criticality, but the release of the exploit has increased its criticality.

The vulnerability is related to insufficient input validation in the Windows Cryptographic Services, which can be exploited to execute arbitrary code remotely. This issue may allow an attacker to affect the system.

The vulnerability is related to the implementation of the Internet Control Message Protocol (ICMP) in the Windows operating system kernel, which is associated with insufficient input validation. This issue can be exploited by a remote attacker to execute arbitrary code. The exploitation involves a low-level protocol error containing a fragmented IP packet in the header sent to the target machine.

The issue is related to a buffer overflow in memory, allowing an attacker to elevate their privileges. This can affect the system, potentially leading to unauthorized access or control.

The issue is related to an elevation-of-privilege vulnerability in the Windows HTTP.sys driver, which is associated with privilege management errors. Exploitation of this issue may allow an attacker to elevate their privileges.

The issue is related to insufficient access restrictions in the Windows Ancillary Function Driver for WinSock, which can be exploited to elevate privileges. This allows an attacker to affect the system. No information is available about the estimated number of potentially affected devices or real-world incidents where this issue was exploited.

The issue is related to a lack of protection for service data in the Windows Ancillary Function Driver for WinSock, which can be exploited by a remote attacker to gain unauthorized access to information. This can allow attackers to obtain sensitive information and affect the system.

The issue is related to insufficient access restrictions in the Windows Ancillary Function Driver for WinSock, which can be exploited to elevate privileges. This allows an attacker to affect the system. No information is available about the estimated number of potentially affected devices or real-world incidents.

The issue is related to insufficient access control in the Windows operating system kernel, allowing an attacker to potentially elevate their privileges. This could impact the system's security.