Heegong123

Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally on the system.

Weak authentication in the Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate privileges locally.

An integer overflow or wraparound in Windows Resource Management (MRM) allows an authorized attacker to elevate privileges locally, which can lead to full system compromise.

An out-of-bounds read in the Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose sensitive information locally and affect the system. An out-of-bounds read occurs when the software reads data past the end of the intended buffer, potentially accessing adjacent memory locations.

The issue allows for arbitrary directory creation, which can be exploited by an attacker. The estimated number of potentially affected devices and details about real-world incidents where this issue was exploited are not provided.

The issue allows an attacker to create arbitrary directories.

The issue is related to an elevation-of-privilege vulnerability in the Windows Search Service, which is caused by incorrect handling of symbolic links before accessing a file. This vulnerability can be exploited by an attacker to elevate their privileges.

The issue allows a local attacker to access specific files due to an implicit intent hijacking vulnerability in the Camera application.

The issue is related to improper validation of integrity checks, allowing local attackers to delete arbitrary directories using directory junctions.

The issue is related to improper privilege management, allowing attackers to cause permanent denial of service (DoS) via directory junction.

The issue concerns the MsIo64.sys component, which does not properly validate input to certain IOCTL requests, specifically 0x80102040, 0x80102044, 0x80102050, and 0x80102054. This allows attackers to trigger memory corruption, potentially causing a Denial of Service (DoS) or escalating privileges via crafted IOCTL requests.

The issue is related to insufficient verification of data authenticity, allowing local attackers to create arbitrary files using symbolic links. This can be exploited by attackers to potentially cause harm.

The issue allows an attacker to execute arbitrary code through a DLL hijacking vulnerability.