Pwn2Addr

An out-of-bounds read exists in the Windows Telephony Service, which allows an authorized attacker to disclose sensitive information locally and affect the system. An out-of-bounds read occurs when the software reads data past the end of the intended buffer, potentially accessing adjacent memory locations.

An integer overflow or wraparound in Microsoft JScript allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system.

A heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system. A heap-based buffer overflow occurs when a program writes more data to a heap memory buffer than it can hold, potentially overwriting adjacent memory.

A heap-based buffer overflow occurs in the DNS Server, which allows an unauthorized remote attacker to execute arbitrary code over a network and affect the system. A heap-based buffer overflow is a memory corruption issue that happens when a program writes more data to a heap-allocated memory block than it can hold.

A heap-based buffer overflow occurs when a program writes more data to a heap memory buffer than it can hold, potentially leading to memory corruption. This issue allows an authorized attacker to elevate privileges locally on the system.

A heap-based buffer overflow in the Windows User Manager Service allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program writes more data to a heap memory buffer than it can hold, potentially leading to memory corruption.

A use-after-free condition in the Windows Connection Manager Service allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an application continues to use a pointer after it has been freed.

A use-after-free condition in the Windows Connection Manager Service allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an application continues to use a pointer after it has been freed.

A heap-based buffer overflow exists in the Windows Xbox Live Networking Service. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network without requiring authentication.

An integer overflow or wraparound occurs in the Windows Network Connection Broker, which allows an authorized attacker to elevate privileges locally.

An integer overflow or wraparound in Microsoft JScript allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system.

A use-after-free issue, which occurs when a program continues to use a pointer after it has been freed, was addressed with improved memory management. Processing maliciously crafted web content may lead to arbitrary code execution.

A heap-based buffer overflow in the HID class driver allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program writes more data to a heap memory buffer than it can hold, potentially leading to memory corruption.

A use-after-free issue in the HID class driver allows an unauthorized attacker to elevate privileges. This occurs during a physical attack, where the attacker can manipulate the system to gain higher access levels. Use-after-free is a memory corruption flaw that happens when an application continues to use a pointer after it has been freed.

An out-of-bounds read in the Windows Remote POS Driver allows an authorized attacker to disclose information locally. An out-of-bounds read occurs when the software reads data past the end of the intended buffer, potentially exposing sensitive memory contents.

An untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally, which can lead to full system compromise.

A heap-based buffer overflow occurs in Windows Smart Card, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruption issue that happens when a program writes more data to a heap-allocated buffer than it can hold.

A buffer over-read exists in Windows RNDIS, which allows an unauthorized attacker to disclose sensitive information through a physical attack. A buffer over-read occurs when a program reads more data from a buffer than it was intended to, potentially exposing data stored in adjacent memory locations.

An out-of-bounds read in the Windows Portable Device MTP Driver allows an authorized attacker to disclose sensitive information locally, which may affect the system.

A race condition exists in the Windows Phone Service, where concurrent execution using a shared resource occurs without proper synchronization. This flaw allows an authorized attacker to elevate privileges locally.