Wonjoon Hwang

A use-after-free issue exists in the Windows Ancillary Function Driver for WinSock. This allows an authorized attacker to elevate privileges locally on the system. Use-after-free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed.

A type confusion issue occurs when a resource is accessed using an incompatible type. This flaw allows an authorized attacker to elevate privileges locally.

An easily exploitable issue exists in the Core component of Oracle VM VirtualBox, allowing a high-privileged attacker with access to the infrastructure where Oracle VM VirtualBox executes to compromise the software. Successful exploitation can result in a takeover of Oracle VM VirtualBox and may significantly impact additional products.