Windows Operating Systems vulnerabilities

Improper access control in Windows Operating Systems allows an authorized attacker to elevate privileges locally.

A race condition vulnerability exists in Windows Operating Systems during concurrent execution using a shared resource. An authorized attacker can exploit this to elevate privileges locally.

A use-after-free vulnerability exists in the Quality Windows Audio/Video Experience (QWAVE) service. An authorized attacker can exploit this to elevate privileges locally.