Thanatos Tian

An out-of-bounds read occurs in the Windows Kernel, which allows an unauthorized attacker to elevate privileges through a physical attack. This issue enables attackers to gain higher-level access to the system.

An untrusted pointer dereference allows an authorized attacker to elevate privileges locally on the system.

A use-after-free issue exists in Windows Message Queuing, which allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed.

An issue exists where the use of an out-of-range pointer offset allows an authorized attacker to elevate privileges locally on the system.

A numeric truncation error in the Windows Overlay Filter allows an authorized attacker to disclose sensitive information locally, which may subsequently affect the system.

A heap-based buffer overflow occurs in the Windows USB Video Driver. This issue allows an authorized attacker to elevate privileges on the system through a physical attack. A heap-based buffer overflow is a memory corruption error that happens when a program writes more data to a heap-allocated buffer than it can hold.

An integer overflow or wraparound in the Link-Layer Discovery Protocol (LLDP) allows an authorized attacker to elevate privileges locally. LLDP is a neighbor discovery protocol used by network devices to advertise their identities and capabilities to their neighbors.

Integer underflow (wrap or wraparound) in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.

A use-after-free condition in the Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an application continues to use a pointer after it has been freed.

A use-after-free issue in the Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed.

An issue in Windows Active Directory allows an authorized attacker to cause a denial of service over a network, which affects the system's availability.

A use-after-free condition exists in the Windows Network Connection Broker. This allows an authorized attacker to elevate privileges locally on the system. Use-after-free is a memory corruption issue that occurs when an application continues to use a pointer after it has been freed.

An integer overflow or wraparound occurs in the Windows Overlay Filter, which allows an unauthorized attacker to elevate privileges locally and affect the system. An integer overflow is a condition where an arithmetic operation attempts to create a numeric value that is outside of the range that can be represented with a given number of bits.

A use-after-free condition in the Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an application continues to use a pointer after it has been freed.

An issue exists in Windows Volume Shadow Copy where concurrent execution using a shared resource with improper synchronization, known as a race condition, allows an authorized attacker to elevate privileges locally. A race condition occurs when the timing or sequence of events affects the correctness of the software.

An out-of-bounds read occurs in Windows Smart Card, which allows an authorized attacker to disclose sensitive information through a physical attack.

An elevation of privilege issue occurs when the Windows Cryptography Next Generation (CNG) Key Isolation service improperly handles memory. An attacker who has already gained execution on the victim system could run a specially crafted application to execute processes in an elevated context.

A heap-based buffer overflow occurs in Windows Devices Human Interface, which allows an authorized attacker to elevate privileges through a physical attack. A heap-based buffer overflow is a memory corruption issue that happens when a program writes more data to a heap-allocated memory block than it can hold.

A use-after-free condition exists in the Windows Storage Spaces Controller. This allows an authorized attacker to elevate privileges locally on the system. Use-after-free is a memory corruption issue that occurs when an application continues to use a pointer after it has been freed.

A use-after-free condition in the Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an application continues to use a pointer after it has been freed.