Windows Update Orchestrator Service vulnerabilities

Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.

Improper link resolution before file access ('link following') in the Windows Update Orchestrator Service allows an authorized attacker to disclose information locally.

Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.

Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.

Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.

A link following vulnerability exists in Windows Update Orchestrator Service, involving improper link resolution before file access. An authorized attacker can exploit this to disclose information locally.

Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally.