Scwuaptx

A time-of-check time-of-use (TOCTOU) race condition exists in the Windows Ancillary Function Driver for WinSock. This condition allows a locally authorized attacker to elevate privileges. The issue arises from a timing window where a check is performed, and the state changes before the operation is carried out, potentially leading to unintended consequences.

Name of the Vulnerable Software and Affected Versions: Windows MBT Transport driver (affected versions not specified) Description: The issue is related to an integer underflow, also known as a wrap or wraparound, in the Windows MBT Transport driver. This allows an authorized attacker to elevate privileges locally. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows TDX.sys (affected versions not specified) Description: The issue is related to an out-of-bounds read in Windows TDX.sys, which allows an authorized attacker to disclose information locally. This means that an attacker with certain privileges can potentially access sensitive data that they should not have access to. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Kernel Streaming WOW Thunk Service Driver (affected versions not specified) Description: The issue is related to a use after free condition in the Kernel Streaming WOW Thunk Service Driver, which allows an authorized attacker to elevate privileges locally. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows Subsystem for Linux (affected versions not specified) Description: The issue is related to an out-of-bounds read that allows an authorized attacker to elevate privileges locally. It is described as an elevation-of-privilege vulnerability that can affect the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.