Keqi Hu

**Name of the Vulnerable Software and Affected Versions** Microsoft Windows Cloud Files Mini Filter Driver (affected versions not specified) **Description** The issue is related to an integer overflow in the Windows Cloud Files mini-filter driver, which can allow an attacker to elevate their privileges to the level of SYSTEM. This can potentially affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Paint 3D (affected versions not specified) **Description** The issue is related to insufficient input validation in the Paint 3D application, which can be exploited by an attacker to execute arbitrary code using a specially crafted malicious file. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows (affected versions not specified) **Description** The issue is related to insufficient access control in the Windows GDI component, allowing an attacker to elevate their privileges. This can impact the system, potentially enabling unauthorized actions. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Bluetooth Driver (affected versions not specified) **Description** The vulnerability is related to insufficient protection of service data in the Windows Bluetooth Driver, which can allow a remote attacker to gain unauthorized access to protected information. It enables attackers to obtain sensitive information and affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Bluetooth Driver (affected versions not specified) **Description** The issue is related to insufficient access control in the Windows Bluetooth Driver, allowing a remote attacker to elevate their privileges. This can affect the system, potentially leading to unauthorized access or control. The vulnerability is also described as an integer underflow in the Microsoft Windows Bluetooth AVDTP Protocol, which can be exploited for remote code execution. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Bluetooth Driver (affected versions not specified) **Description** The issue is related to insufficient input validation in the Windows Bluetooth Driver of the Windows operating system. This can be exploited by a remote attacker to execute arbitrary code. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows (affected versions not specified) **Description** The issue is related to a buffer out-of-bounds operation in memory, which can be exploited by a remote attacker to execute arbitrary code. This can affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows versions prior to the fixed version **Description** The issue is related to an integer overflow in the HTTP.sys driver of the Windows operating system. This can allow an attacker to elevate their privileges. The vulnerability can be exploited to affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft DWM Core Library (affected versions not specified) **Description** The issue is related to insufficient access restrictions in the Microsoft DWM Core Library, which can be exploited to elevate privileges. This can allow an attacker to affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft DWM Core Library (affected versions not specified) **Description** The issue is related to insecure privilege management in the Windows DWM library, which can be exploited to elevate privileges. This allows an attacker to affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Common Log File System Driver (affected versions not specified) **Description** The issue is related to insufficient input validation in the Windows Common Log File System Driver, which can be exploited to disclose protected information. This can allow an attacker to obtain sensitive information and affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Windows (affected versions not specified) **Description** The issue is related to insufficient protection of internal data in the GDI+ graphics library of Microsoft Windows operating systems. This can allow an attacker to gain unauthorized access to protected information. The vulnerability may enable attackers to obtain sensitive information and affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Cloud Files Mini Filter Driver (affected versions not specified) **Description** The vulnerability is related to errors in privilege management in the Windows Cloud Files Mini Filter Driver. It allows an attacker to elevate their privileges. The issue is associated with an integer underflow in the Windows Cloud Filter API and a kernel pool overflow from a restrictive chunk size. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows (affected versions not specified) Description: The issue is related to incorrect code generation management in the OpenType Font Parsing component of Windows operating systems. It allows remote attackers to execute arbitrary code by sending a specially crafted request. This can enable a remote attacker to execute arbitrary code. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows (affected versions not specified) Description: The issue is related to errors in memory object handling in the Base3D component of the Windows operating system. Exploitation of this issue could allow an attacker to execute arbitrary code. An attacker who successfully exploits the issue would gain execution on a victim system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Graphics Component (affected versions not specified) **Description** The issue is related to the improper handling of objects in memory by the Windows Graphics Component, which can allow an attacker to elevate their privileges using a specially crafted application. This can impact the system, potentially allowing attackers to affect it. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows (affected versions not specified) **Description** The issue is related to errors in handling calls by the splwow64.exe executable file in the Windows operating system. This can allow an attacker to elevate their privileges. The vulnerability is a local elevation of privilege issue, which may be exploited to affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows GDI (affected versions not specified) **Description** The issue is related to the Windows GDI component improperly disclosing the contents of its memory. This can allow an attacker to obtain sensitive information using a specially crafted application. The vulnerability is associated with errors in processing objects in memory. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows (affected versions not specified) **Description** The issue is related to insecure privilege management in the Windows Graphics component, allowing an attacker to gain unauthorized access to protected information using a specially crafted application. This is an elevation-of-privilege issue that can affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows (affected versions not specified) **Description** The issue is related to an elevation of privilege in the hdAudio.sys component, which may lead to an out-of-band write. This could allow an attacker to elevate their privileges using a specially crafted application. The vulnerability is also associated with a buffer read overflow in memory. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.