Zhang Wang

A use after free issue in the Windows Update Service allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed.

A use-after-free condition exists in Windows Connected User Experiences and Telemetry. This allows an authorized attacker to elevate privileges locally, potentially affecting the system.

A use after free issue in Windows WalletService allows an authorized attacker to elevate privileges locally. Use after free is a condition where a program continues to use a pointer after it has been freed, which can lead to memory corruption.

A flaw exists in the Windows Connected Devices Platform Service that allows a local attacker to gain elevated privileges. This occurs due to a race condition during concurrent execution using a shared resource with improper synchronization. The issue allows an authorized attacker to elevate privileges locally.

A heap-based buffer overflow exists in the Connected Devices Platform Service (Cdpsvc). This condition allows a locally authenticated attacker to gain elevated privileges on the system. The issue allows attackers to affect the system, potentially leading to privilege escalation.

A race condition exists in Windows WalletService due to concurrent execution using a shared resource with improper synchronization. This allows an unauthorized attacker to elevate privileges locally.

Name of the Vulnerable Software and Affected Versions: Windows (affected versions not specified) Description: An elevation-of-privilege issue allows attackers to affect the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is related to errors in processing objects in memory in the Win32k component of the Windows operating system. This can allow an attacker to elevate their privileges. An elevation-of-privilege vulnerability exists, allowing attackers to affect the system.