Dnpushme

تتعلق المشكلة بثغرة أمنية من نوع «use-after-free» في Microsoft Office Excel، مما يسمح لمهاجم غير مصرح له بتنفيذ تعليمات برمجية محليًّا. يمكن للمهاجمين عن بُعد استغلال هذه الثغرة لتنفيذ تعليمات برمجية عشوائية والتأثير على النظام.

تتعلق المشكلة بثغرة أمنية تتعلق باستخدام الذاكرة بعد تحريرها (use-after-free) في Microsoft Office Excel، مما يسمح لمهاجم غير مصرح له بتنفيذ تعليمات برمجية محليًا. يمكن للمهاجمين عن بُعد استغلال هذه الثغرة لتنفيذ تعليمات برمجية عشوائية والتأثير على النظام. ترتبط هذه الثغرة باستخدام الذاكرة بعد تحريرها.

The issue is related to a heap buffer overflow in the Blink module of Google Chrome and Microsoft Edge browsers, which occurs when processing HTML content. This can allow a remote attacker to potentially exploit heap corruption via a crafted HTML page, leading to arbitrary code execution or denial of service.

A memory corruption issue was addressed with improved state management. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

Name of the Vulnerable Software and Affected Versions: Windows Graphics Device Interface Plus (GDI+) (affected versions not specified) Description: An information disclosure issue exists in the way GDI+ handles objects in memory, allowing an attacker to retrieve information from a targeted system. This issue does not allow arbitrary code execution on its own but could enable it if combined with another vulnerability. To exploit this, an attacker must log on to the system and run a specially crafted application. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

A remote code execution issue exists in Microsoft Excel software due to improper handling of objects in memory. This could allow an attacker to execute arbitrary code using a specially crafted file. If successfully exploited, an attacker could run code in the context of the current user. If the user has administrative rights, the attacker could take control of the system, install programs, view, change, or delete data, or create new accounts with full user rights. Users with fewer user rights may be less impacted than those with administrative rights.

The issue is caused by a buffer overflow in memory, allowing a remote attacker to execute arbitrary code using a specially crafted file. An attacker who successfully exploits this issue could run arbitrary code in the context of the current user. If the current user has administrative rights, the attacker could take control of the affected system, install programs, view, change, or delete data, or create new accounts with full user rights. Users with limited user rights may be less impacted than those operating with administrative rights.

The issue involves the CoreAudio component and allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted movie file.

A denial of service issue exists in the Android media framework.