Clément Rouault

Name of the Vulnerable Software and Affected Versions: Windows (affected versions not specified) Description: An information disclosure issue exists due to improper initialization of objects in memory by the Windows kernel. To exploit this, an authenticated attacker could run a specially crafted application, potentially obtaining information to further compromise the system. The issue is related to a buffer overflow read, which could allow an attacker to gain unauthorized access to protected information using a specially crafted application. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows (affected versions not specified) **Description** The issue is related to errors in handling objects in memory by the tapisrv.dll library in the Windows operating system. Exploitation of this issue may allow an attacker to elevate their privileges using a specially crafted application. It is an elevation of privilege issue that affects the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Telephony Service (affected versions not specified) **Description** The issue is related to errors in handling objects in memory, which can lead to the disclosure of protected information. This can be exploited by an attacker using a specially crafted application to reveal sensitive data. The vulnerability is associated with the improper disclosure of the Telephony Service's memory contents. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.