He Yi Sheng

A use after free issue in Windows WalletService allows an authorized attacker to elevate privileges locally. Use after free is a condition where a program continues to use a pointer after it has been freed, which can lead to memory corruption.

A flaw exists in the Windows Connected Devices Platform Service that allows a local attacker to gain elevated privileges. This occurs due to a race condition during concurrent execution using a shared resource with improper synchronization. The issue allows an authorized attacker to elevate privileges locally.

A race condition exists in Windows WalletService due to concurrent execution using a shared resource with improper synchronization. This allows an unauthorized attacker to elevate privileges locally.