Hyungseok Han

The issue is related to unsafe privilege management in the Windows Fast FAT File System Driver, which can be exploited to elevate privileges. This could allow an attacker to affect the system. No information is available about the estimated number of potentially affected devices or real-world incidents.

The issue is related to insecure privilege management in the Windows NTFS file system, allowing an attacker to elevate their privileges. This can impact the system, potentially enabling unauthorized actions.

The issue is related to insecure privilege management in the Windows NTFS file system, allowing an attacker to elevate their privileges. This can affect the system, potentially leading to unauthorized access or control.

The issue is related to a driver vulnerability in the Storage Spaces Controller component of Windows operating systems, which involves the disclosure of information in an error data area. This could allow an attacker to reveal protected information.

The issue is related to an information disclosure vulnerability in the Windows Common Log File System Driver. It may allow an attacker to gain unauthorized access to protected information by exploiting the vulnerability. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited.

The issue is related to insecure privilege management in the NTFS file system of the Windows operating system. It allows an attacker to elevate their privileges, potentially affecting the system.

The issue is related to incorrect code generation management in the Windows NTFS file system, allowing remote attackers to execute arbitrary code using a specially crafted request. This can affect the system.

The issue is related to insecure privilege management in the Windows NTFS file system, allowing an attacker to elevate their privileges. This can affect the system, potentially leading to unauthorized access or control.

The issue is related to errors in privilege management. It allows an attacker to gain system privileges.

A path handling issue was addressed with improved validation, which could allow a malicious application to overwrite arbitrary files.

The issue is related to a use after free vulnerability in the devtools component of Google Chrome, which can be exploited by a remote attacker using a specially crafted HTML page. This could potentially allow the attacker to access confidential data, compromise data integrity, and cause a denial of service. The vulnerability is associated with heap corruption.

A remote attacker may be able to cause arbitrary javascript code execution due to an injection issue. The issue was addressed with improved validation.

The issue is related to memory corruption and buffer overflow, which may lead to arbitrary code execution when processing maliciously crafted web content. This can allow a remote attacker to execute arbitrary code.

The issue is related to errors in handling objects in memory by the ChakraCore JavaScript engine. This could allow a remote attacker to execute arbitrary code, potentially gaining the same user rights as the current user. If the current user has administrative rights, the attacker could take control of the affected system, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights.

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 12.1.1 tvOS versions prior to 12.1.1 watchOS versions prior to 5.1.2 Safari versions prior to 12.0.2 iTunes for Windows versions prior to 12.9.2 iCloud for Windows versions prior to 7.9 Description: Multiple memory corruption issues were addressed with improved memory handling. Recommendations: For iOS versions prior to 12.1.1, update to version 12.1.1 or later. For tvOS versions prior to 12.1.1, update to version 12.1.1 or later. For watchOS versions prior to 5.1.2, update to version 5.1.2 or later. For Safari versions prior to 12.0.2, update to version 12.0.2 or later. For iTunes for Windows versions prior to 12.9.2, update to version 12.9.2 or later. For iCloud for Windows versions prior to 7.9, update to version 7.9 or later.

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 12.1 tvOS versions prior to 12.1 watchOS versions prior to 5.1 Safari versions prior to 12.0.1 iTunes versions prior to 12.9.1 iCloud for Windows versions prior to 7.8 Description: A memory corruption issue was addressed with improved validation. Recommendations: For iOS versions prior to 12.1, update to version 12.1 or later. For tvOS versions prior to 12.1, update to version 12.1 or later. For watchOS versions prior to 5.1, update to version 5.1 or later. For Safari versions prior to 12.0.1, update to version 12.0.1 or later. For iTunes versions prior to 12.9.1, update to version 12.9.1 or later. For iCloud for Windows versions prior to 7.8, update to version 7.8 or later.

Multiple memory corruption issues were addressed with improved memory handling.

Multiple memory corruption issues were addressed with improved memory handling.

The issue involves the `IOAcceleratorFamily` component and allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.