Junjie

A use after free issue in the Windows Update Service allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed.

A use-after-free condition exists in Windows Connected User Experiences and Telemetry. This allows an authorized attacker to elevate privileges locally, potentially affecting the system.

A heap-based buffer overflow exists in the Connected Devices Platform Service (Cdpsvc). This condition allows a locally authenticated attacker to gain elevated privileges on the system. The issue allows attackers to affect the system, potentially leading to privilege escalation.

Name of the Vulnerable Software and Affected Versions: Windows (affected versions not specified) Description: An elevation-of-privilege issue allows attackers to affect the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.