Haowei Yan

Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.

A use-after-free issue in the Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed.

Incorrect permission assignment for a critical resource allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.

Weak authentication in the Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally, which can lead to full system compromise.

A use-after-free issue in the Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed.

A heap-based buffer overflow occurs in Microsoft Trace Data Helper, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruption issue that happens when a program writes more data to a heap-allocated buffer than it can hold.

A use after free issue in the Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed.

An integer overflow or wraparound occurs in the Windows Client for NFS, which allows an authorized attacker to elevate privileges locally and affect the system. An integer overflow is a condition where an arithmetic operation attempts to create a numeric value that is outside of the range that can be represented with a given number of digits.

A relative path traversal issue exists in Windows libarchive. This flaw allows an unauthorized attacker to perform tampering over a network. Path traversal is a technique where an attacker uses special characters or sequences to access files or directories outside the intended folder.

Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally.

An out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute arbitrary code locally and remotely, which can affect the system. An out-of-bounds read occurs when the software reads data past the end of the intended buffer, potentially accessing restricted memory.

A heap-based buffer overflow exists in the Desktop Window Manager. This issue allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program writes more data to a heap memory buffer than it can hold, potentially leading to memory corruption.

A heap-based buffer overflow occurs in the Windows Partition Management Driver. This issue allows an authorized attacker to elevate privileges locally on the system. A heap-based buffer overflow is a memory corruption error that happens when a program writes more data to a heap-allocated buffer than it can hold.

Insufficient granularity of access control in the Windows StateRepository API allows an authorized attacker to elevate privileges locally.

Insufficient granularity of access control allows an authorized attacker to perform local tampering, which can affect the system.

A double free issue exists in Windows Libarchive, which allows an unauthorized remote attacker to execute arbitrary code over a network and affect the system. A double free occurs when the program attempts to free the same memory location twice, which can lead to memory corruption.

Missing authentication for a critical function in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

Missing authentication for a critical function allows an authorized attacker to perform local tampering, which can affect the system.

A buffer over-read in the Windows Encrypting File System (EFS) allows an authorized attacker to disclose sensitive information locally.