Myeonghun Pak

A use-after-free issue in the Windows Kernel allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed.

A memory corruption issue exists in the legacy USB CDC virtual COM port driver. The problem occurs when `rx ringbuffer` is aliased as a Serial V2 `rt serial rx fifo` within the ` function enable()` function. A connected USB host configuring the CDC device can trigger writes that exceed the ring buffer, overwriting `struct vcom` members. This leads to an invalid `rt free()` call upon closing the connection, resulting in a denial of service.

A flaw in the Core component allows a high privileged attacker with access to the infrastructure where the software executes to compromise the system. This can lead to a complete Denial of Service (DOS), characterized by a system hang or frequently repeatable crashes. The impact may extend beyond the software to affect additional products due to a scope change.

A flaw in the Core component allows a high privileged attacker with access to the infrastructure where the software executes to compromise the system. This can lead to a complete Denial of Service (DOS), characterized by a system hang or frequently repeatable crashes. The impact may extend beyond the software to affect additional products due to a scope change.

A flaw in the Core component allows a high privileged attacker with access to the infrastructure where the software executes to compromise the system. Successful exploitation can lead to a full takeover of the application and may significantly impact additional products due to a scope change.

A flaw in the Core component allows an unauthenticated attacker with network access via RDP to compromise the system. Successful exploitation can lead to unauthorized access to critical data, complete access to all accessible data, or the ability to unauthorizedly update, insert, or delete data.

A flaw in the Core component allows a high privileged attacker with access to the infrastructure where the software executes to compromise the system. This can lead to a complete Denial of Service (DOS), characterized by a system hang or frequently repeatable crashes. The impact may extend beyond the software to affect additional products due to a scope change.

A flaw in the Core component allows a high privileged attacker with access to the infrastructure where the software executes to compromise the system. This can lead to a complete Denial of Service (DOS) by causing a hang or repeatable crash. Additionally, it allows unauthorized read access to a subset of data, as well as unauthorized ability to update, insert, or delete accessible data. The impact may extend to additional products due to a scope change.

A flaw in the Core component allows a high privileged attacker with access to the infrastructure where the software executes to compromise the system. This can lead to a complete Denial of Service (DOS), characterized by a system hang or frequently repeatable crashes. The impact may extend beyond the software to affect additional products due to a scope change.

A flaw in the Core component allows a high privileged attacker with access to the infrastructure where the software executes to compromise the system. This can lead to a complete Denial of Service (DOS) by causing a hang or repeatable crash. Additionally, it allows unauthorized read access to a subset of data, as well as unauthorized ability to update, insert, or delete accessible data. The impact may extend to additional products due to a scope change.

A flaw in the Core component allows a high privileged attacker with access to the infrastructure where the software executes to compromise the system. This can lead to an unauthorized hang or a frequently repeatable crash, resulting in a complete Denial of Service (DOS), which is a condition where the system becomes unavailable to its intended users.

A flaw in the Core component allows a high privileged attacker with access to the infrastructure where the software executes to compromise the system. This can lead to unauthorized read access to a subset of data, as well as unauthorized update, insert, or delete access to some accessible data.

An issue in the authorization component allows a low-privileged attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauthorized read, update, insert, or delete access to certain accessible data, as well as the ability to cause a partial denial of service (DoS), which is a condition where a system becomes partially unavailable to its intended users.