Heechan Kim

Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally on the system.

Weak authentication in the Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate privileges locally.

An integer overflow or wraparound in Windows Resource Management (MRM) allows an authorized attacker to elevate privileges locally, which can lead to full system compromise.

An out-of-bounds read in the Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose sensitive information locally and affect the system. An out-of-bounds read occurs when the software reads data past the end of the intended buffer, potentially accessing adjacent memory locations.

The issue allows for arbitrary directory creation, which can be exploited by an attacker. The estimated number of potentially affected devices and details about real-world incidents where this issue was exploited are not provided.

A critical vulnerability has been found in the WinSxS DLL Handler component of Caphyon Advanced Installer. The manipulation leads to an uncontrolled search path. Attacking locally is a requirement. The exploit has been disclosed to the public.

The issue allows a local attacker to access specific files due to an implicit intent hijacking vulnerability in the Camera application.

A DLL hijacking issue allows attackers to execute arbitrary code by placing a crafted DLL file in the same directory as the executable.

The issue is related to improper privilege management, allowing attackers to cause permanent denial of service (DoS) via directory junction.

The issue concerns the MsIo64.sys component, which does not properly validate input to certain IOCTL requests, specifically 0x80102040, 0x80102044, 0x80102050, and 0x80102054. This allows attackers to trigger memory corruption, potentially causing a Denial of Service (DoS) or escalating privileges via crafted IOCTL requests.

The issue is related to insufficient verification of data authenticity, allowing local attackers to create arbitrary files using symbolic links. This can be exploited by attackers to potentially cause harm.

The issue allows an attacker to execute arbitrary code through a DLL hijacking vulnerability.