Shaowei Yan

**Name of the Vulnerable Software and Affected Versions** Microsoft Defender (affected versions not specified) **Description** A heap-based buffer overflow exists in Microsoft Defender. This issue allows an unauthorized attacker to execute arbitrary code over a network. A heap-based buffer overflow occurs when a program writes more data to a heap memory buffer than it can hold, potentially corrupting memory and allowing for code execution. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Ancillary Function Driver for WinSock (affected versions not specified) **Description** A flaw exists in the Windows Ancillary Function Driver for WinSock that could allow a local attacker to gain elevated privileges. The issue is related to memory management, specifically memory not allocated on the heap. Successful exploitation of this issue could lead to a local privilege escalation. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows (affected versions not specified) **Description** An issue exists in the Windows Cloud Files Mini Filter Driver where an untrusted pointer dereference can occur. This can allow a locally authorized attacker to gain elevated privileges. The issue allows attackers to affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.