Xiaozun Tang

Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.

A heap-based buffer overflow occurs in Microsoft Trace Data Helper, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruption issue that happens when a program writes more data to a heap-allocated buffer than it can hold.

Weak authentication in the Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally, which can lead to full system compromise.

A use-after-free issue in the Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed.

Incorrect permission assignment for a critical resource allows an authorized attacker to elevate privileges locally.

Insufficient granularity of access control allows an authorized attacker to perform local tampering, which can affect the system.

A heap-based buffer overflow occurs in the Windows Partition Management Driver. This issue allows an authorized attacker to elevate privileges locally on the system. A heap-based buffer overflow is a memory corruption error that happens when a program writes more data to a heap-allocated buffer than it can hold.

A heap-based buffer overflow occurs in Windows Error Reporting, which allows an unauthorized remote attacker to execute arbitrary code over a network and affect the system. A heap-based buffer overflow is a memory corruption issue that happens when a program writes more data to a heap-allocated buffer than it can hold.

A heap-based buffer overflow occurs in Windows Image Acquisition, which allows an unauthorized attacker to execute arbitrary code over a network and affect the system. A heap-based buffer overflow is a memory corruption issue that happens when a program writes more data to a heap-allocated memory block than it can hold.

A buffer over-read in the Windows Encrypting File System (EFS) allows an authorized attacker to disclose sensitive information locally.

Missing authentication for a critical function in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

Missing authentication for a critical function allows an authorized attacker to perform local tampering, which can affect the system.

Weak authentication in Windows Modern Device Management (MDM) allows an authorized attacker to perform local tampering, which can affect the system.

Improper access control allows an authorized attacker to disclose sensitive information locally and affect the system.

Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally on the system.

Exposure of sensitive system information to an unauthorized control sphere allows an authorized attacker to disclose information locally.

An integer underflow (wrap or wraparound) occurs, which allows an authorized attacker to elevate privileges locally and affect the system. Integer underflow is a condition where a subtraction operation results in a value smaller than the minimum representable value for that data type, causing it to wrap around to a very large positive number.

A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an authorized attacker to elevate privileges locally on the system.

A use-after-free issue in Windows TCP/IP allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed.