Matthew Cox

**Name of the Vulnerable Software and Affected Versions** Windows HTTP.sys (affected versions not specified) **Description** An issue exists in Windows HTTP.sys where an untrusted pointer dereference can allow a locally authenticated attacker to gain elevated privileges. The issue allows attackers to affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows HTTP.sys (affected versions not specified) **Description** A time-of-check time-of-use (TOCTOU) race condition exists in Windows HTTP.sys. This condition can be exploited by an authorized attacker to gain elevated privileges on a local system. The issue involves a flaw in how the system verifies conditions between the time a check is performed and the time the result of that check is used. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows HTTP.sys (affected versions not specified) **Description** An issue exists in Windows HTTP.sys where an untrusted pointer dereference can lead to local privilege escalation. An authorized attacker can exploit this to gain elevated privileges on a system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows Internet Information Services (affected versions not specified) Description: An out-of-bounds read issue exists in Windows Internet Information Services, potentially allowing an unauthorized attacker to cause a denial-of-service condition over a network. This issue can affect the system, leading to a denial-of-service. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.