He Yi Sheng

**Name of the Vulnerable Software and Affected Versions** Windows WalletService (affected versions not specified) **Description** A use after free issue in Windows WalletService allows an authorized attacker to elevate privileges locally. Use after free is a condition where a program continues to use a pointer after it has been freed, which can lead to memory corruption. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Connected Devices Platform Service (affected versions not specified) **Description** A flaw exists in the Windows Connected Devices Platform Service that allows a local attacker to gain elevated privileges. This occurs due to a race condition during concurrent execution using a shared resource with improper synchronization. The issue allows an authorized attacker to elevate privileges locally. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows versions prior to 2026-20853 **Description** A race condition exists in Windows WalletService due to concurrent execution using a shared resource with improper synchronization. This allows an unauthorized attacker to elevate privileges locally. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.