Jonghoi Kim

An out-of-bounds read allows an authorized attacker to disclose sensitive information locally, which can subsequently affect the system.

An out-of-bounds read occurs in the DNS Server, which allows an unauthorized attacker to cause a denial of service over a network. This issue enables attackers to negatively affect the system's availability.

A stack-based buffer overflow occurs in the Desktop Window Manager, which allows an authorized attacker to elevate privileges locally. A stack-based buffer overflow is a condition where a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially overwriting adjacent memory.

A heap-based buffer overflow occurs in the DNS Server, which allows an unauthorized remote attacker to execute arbitrary code over a network and affect the system. A heap-based buffer overflow is a memory corruption issue that happens when a program writes more data to a heap-allocated memory block than it can hold.

A heap-based buffer overflow allows an authorized attacker to execute arbitrary code over a network, which can affect the system. A heap-based buffer overflow occurs when a program writes more data to a heap memory buffer than it can hold, potentially overwriting adjacent memory.

An integer overflow or wraparound occurs in Windows DNS, which allows an unauthorized attacker to disclose sensitive information over a network.

A use after free issue exists in Windows Update Delivery Optimization. This allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed, which can lead to arbitrary code execution or privilege escalation.

An issue in the Windows Client Side Caching driver (csc.sys) allows an authorized attacker to locally disclose sensitive information to an unauthorized actor. Additionally, this flaw can be used to achieve elevation of privilege, allowing attackers to affect the system.

A null pointer dereference occurs in the Windows DHCP Server, which allows an unauthorized attacker to cause a denial of service over a network. A null pointer dereference is a software error where the program attempts to read from or write to a memory address that is null, typically leading to a system crash.

A heap-based buffer overflow in the Windows USB Printing Stack `usbprint.sys` allows an unauthorized attacker to elevate privileges. This issue can be exploited through a physical attack.

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A buffer over-read issue in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally. This issue affects Virtual Hard Disk (VHDX), enabling an attacker to gain elevated privileges on the local system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A buffer over-read issue in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally. This issue affects Virtual Hard Disk (VHDX), enabling an attacker to gain elevated privileges. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.