New vulnerabilities – clearly explained

Microsoft Windows 10 1809

Research and translation in progress – available shortly.

Windows 10 1607: Heap-based buffer overflow in WMI allows privilege escalation

Windows 10 Version 1607 contains a heap-based buffer overflow in Windows Management Instrumentation (WMI). An authorized local user with low privileges can exploit it to elevate privileges, with high impact on confidentiality, integrity and availability. The attacker needs a local logon and no user interaction, and the flaw is not exploitable remotely. Microsoft has released a fix, and no public exploit or active exploitation is known.

Microsoft · Windows 10 Version 1607

Microsoft Windows 10 1809

Research and translation in progress – available shortly.

Microsoft Windows 10 1607

Research and translation in progress – available shortly.

Microsoft Windows 10 1607

Research and translation in progress – available shortly.

Microsoft Windows 10 1607

Research and translation in progress – available shortly.

Microsoft Windows 10 1607

Research and translation in progress – available shortly.

Microsoft Windows 10 1809

Research and translation in progress – available shortly.

Microsoft Windows 11 26h1

Research and translation in progress – available shortly.

Microsoft Windows 10 1809

Research and translation in progress – available shortly.

Microsoft Windows 10 1607: Elevation of privilege in WebDAV

A flaw in the WebDAV component of Windows 10 Version 1607 and Windows Server 2016 allows an attacker to elevate privileges on the local system. The bug is an untrusted pointer dereference (CWE-822). An attacker needs a valid low-privileged account or code running on the machine, and no user interaction is required. The impact is rated high for confidentiality, integrity and availability.

Microsoft · Windows 10 1607

Microsoft Windows 10 1607

Research and translation in progress – available shortly.

Windows Bluetooth Driver: Integer underflow allows privilege escalation

An integer underflow in the Microsoft Bluetooth driver of Windows allows an authorized attacker to elevate privileges. The attacker needs a low-privilege account on the host and Bluetooth proximity (adjacent attack vector, PR:L, UI:N). Microsoft rates the impact on confidentiality, integrity and availability as high. Microsoft marks the vulnerability as not exploited, and no public proof of concept was found.

Microsoft · Windows

Windows 10 1607: Heap-based buffer overflow in WebDAV enables local privilege escalation

A heap-based buffer overflow in the Windows WebDAV component allows an authorized local user to elevate privileges. An attacker needs valid low-privileged access to the system but no user interaction, so this is a follow-on step after a foothold rather than a remote entry point. The CVSS 3.1 base score is 7.8 (High), with high impact on confidentiality, integrity and availability. It matters most on terminal servers, multi-user hosts and systems where a compromised user account is a realistic starting point.

Microsoft · Windows 10 1607

Microsoft Windows 10 1607

Research and translation in progress – available shortly.

Microsoft Windows Search Component: Use after free allows privilege escalation

A use-after-free flaw in the Microsoft Windows Search Component allows an authorized local attacker to elevate privileges. The attacker needs a valid low-privileged account on the affected system. If exploited, the CVSS vector (C:H/I:H/A:H) indicates full control of the host.

Microsoft · Windows Search Component

Microsoft Windows 10 21h2

Research and translation in progress – available shortly.

Microsoft Windows 10 1607

Research and translation in progress – available shortly.

Microsoft Windows 10 21h2

Research and translation in progress – available shortly.

Windows DHCP Server: Remote code execution via heap-based buffer overflow

A heap-based buffer overflow in the Windows DHCP Server role allows an unauthenticated attacker to execute code remotely over the network. The CVSS base score is 9.8 (Critical), while Microsoft rates the flaw as Important. Exploitation requires network access to a DHCP server with the role installed, which is normally limited to the internal LAN.

Microsoft · Windows DHCP Server

Microsoft Windows 10 21h2

Research and translation in progress – available shortly.

Microsoft Windows: Local privilege escalation via heap overflow in Resume

A heap-based buffer overflow in the Windows Resume component allows an authorized local attacker to elevate privileges. The attacker needs an existing local account with low privileges, so the flaw is not directly reachable from the internet. Microsoft rates the impact as high for confidentiality, integrity and availability (CVSS 3.1: 7.8).

Microsoft · Windows

Windows: Use-after-free in kernel allows local privilege escalation

A use-after-free flaw (CWE-416) in the Windows kernel allows an authorized local attacker to elevate privileges. The attacker needs a local session with low privileges, and no user interaction is required. Successful exploitation would give full control over the affected system, so a local foothold could become SYSTEM access.

Microsoft · Windows

Microsoft Windows 10 1607

Research and translation in progress – available shortly.

Microsoft Windows 10 1607

Research and translation in progress – available shortly.