M4X_1997

A use-after-free condition in the Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network. Use-after-free is a memory corruption issue that occurs when an application continues to use a pointer after it has been freed.

A heap-based buffer overflow occurs in Winlogon, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a condition where a program writes more data to a heap memory buffer than it can hold, potentially leading to memory corruption.

A heap-based buffer overflow occurs in Windows Management Instrumentation, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruption issue that happens when a program writes more data to a heap-allocated buffer than it can hold.

Uncontrolled resource consumption in the Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to cause a denial-of-service condition over a network, affecting the system's availability.

Deserialization of untrusted data in Windows DNS allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system.

Improper privilege management allows an authorized attacker to disclose sensitive information locally, which can affect the system.

A relative path traversal issue allows an authorized attacker to disclose sensitive information over a network, which can subsequently affect the system. Path traversal is a method where an attacker uses special characters to access files and directories outside the intended folder.

A null pointer dereference in Windows NTFS allows an unauthorized attacker to execute arbitrary code locally and remotely, which can affect the system. A null pointer dereference occurs when a program attempts to read from or write to a memory address that is NULL, often leading to a system crash or allowing for code execution.

A relative path traversal issue allows an unauthorized attacker to disclose sensitive information over a network, which can subsequently affect the system. Path traversal is a method where an attacker uses special characters to access files and directories outside the intended folder.

An out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally, which can lead to full system compromise.

An issue in Windows HTTP.sys allows an authorized attacker to locally disclose sensitive system information to an unauthorized control sphere.

An out-of-bounds write issue occurs due to insufficient bounds checking. Processing a maliciously crafted PDF file may lead to memory corruption, which happens when a program writes data outside the boundaries of a pre-allocated memory buffer.

A heap-based buffer overflow occurs in Winlogon, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruption issue that happens when a program writes more data to a heap-allocated buffer than it can hold.

A heap-based buffer overflow occurs in the Reliable Multicast Transport Driver (RMCAST), which allows an unauthorized attacker to execute arbitrary code over an adjacent network and affect the system. A heap-based buffer overflow is a memory corruption issue that happens when a program writes more data to a heap-allocated buffer than it can hold.

A stack-based buffer overflow exists in Windows Error Reporting, which allows an unauthorized remote attacker to execute arbitrary code over a network and affect the system. A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially overwriting adjacent memory.

A heap-based buffer overflow in the Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program writes more data to a heap memory buffer than it can hold, potentially leading to memory corruption.

A stack-based buffer overflow in the Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally. A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially overwriting adjacent memory.

A heap-based buffer overflow occurs in the Windows Kernel, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruption issue that happens when a program writes more data to a heap-allocated buffer than it can hold.

A use after free issue in the Windows CCFFilter Driver allows an unauthorized remote attacker to execute arbitrary code over a network and affect the system. Use after free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed.

A heap-based buffer overflow occurs in the Windows SMB Client, which allows an unauthorized attacker to elevate privileges over a network. A heap-based buffer overflow is a memory corruption issue that happens when a program writes more data to a heap-allocated memory block than it can hold.