Oooooooooooo

A race condition exists in the Windows Point-to-Point Protocol over Ethernet (PPPoE) component. This occurs when concurrent execution uses a shared resource with improper synchronization, allowing an authorized attacker to elevate privileges locally. A race condition is a situation where the system's substantive behavior is dependent on the sequence or timing of other uncontrollable events.

Weak authentication in Windows Storage allows an authorized attacker to elevate privileges locally, which can lead to an elevation-of-privilege impact on the system.

Improper access control in Windows Print Spooler components allows an authorized attacker to elevate privileges locally, which can lead to full system compromise.

Improper authorization in Windows Task Scheduler allows an authorized attacker to elevate privileges locally, which can lead to an elevation-of-privilege impact on the system.

A use after free issue exists in Windows Kernel-Mode Drivers. This flaw allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption issue that occurs when an application continues to use a pointer after it has been freed.

A use-after-free condition in the Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an application continues to use a pointer after it has been freed.

An elevation of privilege issue exists in the Network Driver Interface Specification (NDIS) due to a failure in `ndis.sys` to verify buffer length before copying memory. A local attacker could execute a specially crafted application to run processes in an elevated context, provided they already have local system access to execute malicious code.