Mihalis Haatainen

A denial-of-service issue exists within the Graphics: WebGPU component. WebGPU is a modern API that allows web applications to access the GPU for hardware-accelerated graphics and computation.

A memory safety bug exists in the software, which could lead to unexpected behavior or crashes when handling memory operations.

A memory safety bug exists in the software, which could lead to unexpected behavior or crashes when handling memory operations.

Incorrect boundary conditions exist in the Graphics: CanvasWebGL component.

A time-of-check time-of-use (TOCTOU) race condition occurs in Microsoft Defender for Endpoint. This is a software bug where a system checks a condition (such as a security credential) and then uses the result of that check, but the condition changes between the check and the use. This flaw allows an authorized attacker to elevate privileges locally due to synchronization errors when using a shared resource.

A use-after-free race condition exists in the IOKit framework, specifically within the IOTimeSyncFamily kernel extension and the `IOTimeSyncClockManager` component. A use-after-free is a memory corruption issue that occurs when an application continues to use a pointer after the memory it points to has been freed. This flaw may allow an app to cause unexpected system termination.

The issue exists due to inadequate protection of the web page structure, allowing for cross-site scripting (XSS) attacks. This can enable a remote attacker to execute arbitrary JavaScript or HTML using a specially crafted hyperlink.