Landon Peng

Incorrect resource transfer between spheres in Windows Error Reporting allows an authorized attacker to elevate privileges locally, which can lead to an impact on the system.

Incorrect authorization in the Windows Text Services Framework allows an authorized attacker to elevate privileges locally, which can lead to an elevation-of-privilege impact on the system.

Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally.

An absolute path traversal issue exists that allows an authorized attacker to disclose sensitive information over a network.

Improper authorization in the Windows Portable Device Enumerator Service allows an authorized attacker to elevate privileges locally, which can lead to full system compromise.

Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally on the system.

An absolute path traversal issue exists in the Windows Encrypting File System (EFS). This allows an authorized attacker to elevate privileges over a network.