Azure Yang

**Name of the Vulnerable Software and Affected Versions** Windows Message Queuing (affected versions not specified) **Description** A heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker located on an adjacent network to execute arbitrary code. A heap-based buffer overflow occurs when an application writes more data to a heap-allocated memory block than it can hold, potentially corrupting adjacent memory. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Capability Access Management Service (camsvc) (affected versions not specified) Description: A race condition exists within the Capability Access Management Service (camsvc) due to improper synchronization during concurrent execution using a shared resource. This allows a locally authorized attacker to elevate privileges. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows Message Queuing (affected versions not specified) Description: A use-after-free issue exists in Windows Message Queuing that may allow an unauthorized attacker to execute code over a network. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows Lightweight Directory Access Protocol (LDAP) (affected versions not specified) Description: An uncontrolled resource consumption issue in Windows Lightweight Directory Access Protocol (LDAP) allows an unauthorized attacker to cause a denial of service over a network. The vulnerability is related to uncontrolled resource usage within the LDAP implementation. Exploitation may allow a remote attacker to cause a denial of service. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows Cryptographic Services (affected versions not specified) Description: The issue is related to uncontrolled resource consumption in Windows Cryptographic Services, allowing an unauthorized attacker to deny service over a network. This can lead to a denial-of-service condition, affecting the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows Standards-Based Storage Management Service (affected versions not specified) Description: The issue is related to uncontrolled resource consumption, allowing an unauthorized attacker to deny service over a network. This can affect the system, leading to a denial-of-service condition. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows LDAP (affected versions not specified) Description: The issue concerns uncontrolled resource consumption in Windows LDAP, allowing an unauthorized attacker to deny service over a network. This can lead to a denial-of-service attack. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows Standards-Based Storage Management Service (affected versions not specified) Description: The issue is related to uncontrolled resource consumption in the Windows Standards-Based Storage Management Service, which allows an unauthorized attacker to deny service over a network. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows Standards-Based Storage Management Service (affected versions not specified) Description: The issue is related to uncontrolled resource consumption in the Windows Standards-Based Storage Management Service, which allows an unauthorized attacker to deny service over a network. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows (affected versions not specified) **Description** The issue is related to insufficient input validation in the Internet Storage Name Service (iSNS) of Windows operating systems. It allows a remote attacker to cause a denial of service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** HEVC Video Extensions (affected versions not specified) **Description** The issue is related to incorrect code generation management in the HEVC Video Extension codec. It allows a remote attacker to execute arbitrary code using a specially crafted request. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** HEVC Video Extensions (affected versions not specified) **Description** The issue is related to incorrect code generation management in the HEVC Video Extension codec. Exploitation of this issue may allow a remote attacker to execute arbitrary code using a specially crafted request. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** HEVC Video Extensions (affected versions not specified) **Description** The issue is related to incorrect code generation management in the HEVC Video Extension codec. It may allow a remote attacker to execute arbitrary code using a specially crafted request. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** HEVC Video Extensions (affected versions not specified) **Description** The issue is related to incorrect code generation management in the HEVC Video Extensions codec. Exploitation of this issue may allow an attacker to execute arbitrary code. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** HEVC Video Extensions (affected versions not specified) **Description** The issue is related to incorrect code generation management in the HEVC Video Extension codec. Exploitation of this issue may allow an attacker to execute arbitrary code. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.