Sweetchip

A use after free issue in the Windows Device Association Service allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed.

A use-after-free condition exists in the Windows Brokering File System. This allows an authorized attacker to elevate privileges locally on the system. Use-after-free is a memory corruption issue that occurs when an application continues to use a pointer after it has been freed.

Null pointer dereference in Microsoft Defender allows an unauthorized attacker to execute code over a network.

An integer underflow (wrap or wraparound) occurs in Windows Internet Information Services, which allows an unauthorized attacker to cause a denial of service over a network. An integer underflow is a condition where a subtraction operation results in a value smaller than the minimum value the variable can hold, causing it to wrap around to a very large positive number.

Weak authentication in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally, which can lead to an elevation-of-privilege impact on the system.

A double free issue in the Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally. A double free occurs when the program attempts to free the same memory location twice, which can lead to memory corruption and system instability.

Improper authentication in the Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally, which can lead to full system compromise.

An out-of-bounds read in the Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose sensitive information locally.

An issue in the Windows Kernel involving the release of an invalid pointer or reference allows an authorized attacker to elevate privileges locally. This elevation-of-privilege allows attackers to affect the system.

An authorized attacker can locally disclose information due to the use of an uninitialized resource within the Windows Print Spooler Components.

Missing authentication for a critical function in the Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally to SYSTEM. Low-privileged code with access to the Windows diagnostics workflow can trigger a trusted Event Tracing for Windows (ETW) event containing an attacker-controlled Lua module path. The `whesvc` service can then execute that module through WinDiag without properly validating the producer or restricting the module location.

An untrusted pointer dereference in the Microsoft Windows Search Component allows an authorized attacker to disclose sensitive information locally and affect the system. A pointer dereference occurs when a program attempts to read or write to a memory address stored in a pointer that has not been properly validated.

An out-of-bounds read in the Windows Kernel allows an authorized attacker to disclose information locally. An out-of-bounds read occurs when the software reads data past the end of the intended buffer, potentially exposing sensitive memory contents.

An out-of-bounds read in Windows HTTP.sys allows an authorized attacker to disclose sensitive information locally and affect the system. An out-of-bounds read occurs when the software reads data past the end of the intended buffer, potentially accessing memory that should be restricted.

A heap-based buffer overflow occurs in the Windows DHCP Server, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruption issue that happens when a program writes more data to a heap-allocated memory block than it can hold.

A use after free issue exists in FullScreen on Windows. This allows a remote attacker who has already compromised the renderer process to potentially achieve a sandbox escape by using a specially crafted HTML page. Use after free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed.

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 146.0.7680.178 Description A use-after-free issue in Dawn within Google Chrome, prior to version 146.0.7680.178, could allow a remote attacker to execute arbitrary code through a specially crafted HTML page. The Chromium security severity is rated as High. Recommendations Update Google Chrome to version 146.0.7680.178 or later.

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 146.0.7680.178 Description A flaw exists in ANGLE within Google Chrome, potentially allowing a remote attacker to access data from different origins through a specially designed HTML page. This issue is categorized as having high severity. Recommendations Update Google Chrome to version 146.0.7680.178 or later.

An out of bounds write occurs in ANGLE, which is a compatibility layer that allows OpenGL ES to run on various graphics APIs. This issue allows a remote attacker to potentially exploit heap corruption, a condition where memory is written outside the allocated boundaries of the heap, by using a crafted HTML page.

An integer overflow in the Dawn renderer within Google Chrome on Mac systems could allow a remote attacker to leak cross-origin data. This is achieved through a crafted HTML page.