Windows MIDI Service Module vulnerabilities

Null pointer dereference vulnerability in the Windows MIDI Service Module. An authorized attacker can elevate privileges locally.

Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

Exposure of sensitive system information to an unauthorized control sphere in the Windows MIDI Service Module allows an authorized attacker to disclose information locally.

Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. The flaw may be exploited to gain higher privileges on the system.

Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

Stack-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

Time-of-check time-of-use (toctou) race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

A vulnerability in the Windows MIDI Service Module involves exposure of sensitive system information to an unauthorized control sphere. An authorized attacker could exploit this to disclose information locally.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

Improper access control in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.