Dhanesh Kizhakkinan

The issue is related to errors in processing input data in Microsoft Word, allowing remote attackers to execute arbitrary code and affect the system.

The issue is caused by synchronization errors when using a shared resource in Microsoft Excel, allowing an attacker to gain unauthorized access to the device. This can enable attackers to obtain sensitive information and affect the system.

The issue concerns a driver that provides raw read and write access to port I/O and MSRs via unprivileged IOCTL calls, allowing local users to gain privileges. This has been exploited in real-world incidents, including attacks by the Lazarus group, which targeted security researchers and media companies in the US and Europe. The attackers used phishing schemes, including sending malicious documents, to deploy backdoors and gain control over targeted systems. The estimated number of potentially affected devices is not specified.

The issue is related to a buffer overflow in the Windows Graphics Component, which can allow an attacker to execute arbitrary code. This is an elevation-of-privilege vulnerability that affects the system. It has been reported that this issue has been exploited in the wild.

The issue is related to insufficient input validation in the HEVC Video Extensions codec. This can allow a remote attacker to execute arbitrary code.

The issue is related to incorrect code generation management in the HEVC Video Extension codec. It allows a remote attacker to execute arbitrary code using a specially crafted request.

The issue is related to incorrect code generation management in the HEVC Video Extension codec. Exploitation of this issue may allow a remote attacker to execute arbitrary code using a specially crafted request.

The issue is related to incorrect code generation management in the HEVC Video Extension codec. It may allow a remote attacker to execute arbitrary code using a specially crafted request.

The issue is related to incorrect code generation management in the HEVC Video Extensions codec. Exploitation of this issue may allow an attacker to execute arbitrary code.

The issue is related to incorrect code generation management in the HEVC Video Extensions codec. Exploitation of this issue may allow an attacker to execute arbitrary code.

The issue is related to incorrect code generation management in the HEVC Video Extensions codec. Exploitation of this issue may allow an attacker to execute arbitrary code.

The issue is related to incorrect code generation management in the HEVC Video Extension codec. Exploitation of this issue may allow a remote attacker to execute arbitrary code using a specially crafted request.

The issue is related to insufficient input validation in the HEVC Video Extensions codec. This can allow a remote attacker to execute arbitrary code.

The issue concerns a remote code execution vulnerability. It involves a buffer overflow in the HEVC Video Extension codec when processing HEIC files, potentially allowing an attacker to execute arbitrary code by sending a specially crafted request.

The issue is related to a buffer overflow in memory when processing HEIC files, which can allow an attacker to execute arbitrary code.

The issue is related to incorrect code generation management in the HEVC Video Extension codec. Exploitation of this issue may allow an attacker to execute arbitrary code.

Remote code execution is possible in MSHTML, the browser rendering engine used by Microsoft Internet Explorer and hosted within Microsoft Office documents. The issue stems from incorrect code generation management. An attacker can exploit this by crafting a malicious ActiveX control and embedding it into a Microsoft Office document. If a user is convinced to open the document, the attacker can execute arbitrary code on the system. Users with administrative rights are more severely impacted than those with restricted user rights. Real-world exploitation has been observed in targeted attacks by state-sponsored groups, such as APT 35, and has been used to deploy the MerkSpy spyware to monitor activities and capture sensitive information.

The issue is related to incorrect code generation management in the HEVC Video Extensions application. Exploitation of this issue may allow a remote attacker to execute arbitrary code.

The issue is related to incorrect code generation management in the application. Exploitation of this issue may allow an attacker to execute arbitrary code.

The issue is related to incorrect code generation management in the HEVC Video Extensions codec. Exploitation of this issue may allow a remote attacker to execute arbitrary code.