Jihui Lu

The issue arises from memory corruption, potentially allowing attackers to execute arbitrary code when processing maliciously crafted web content. This can lead to arbitrary code execution.

The issue is related to memory corruption and can be triggered by processing maliciously crafted web content, potentially leading to arbitrary code execution. It is associated with a buffer overflow in the WebKit display module. A remote attacker could exploit this issue by using a specially crafted web page to execute arbitrary code.

The issue is related to memory corruption and can be exploited by processing maliciously crafted web content, potentially leading to arbitrary code execution. It is associated with a buffer overflow in the WebKit display module. A remote attacker can exploit this issue using a specially crafted web page.

The issue is related to a buffer overflow in the WebKit display module, which can be exploited by a remote attacker using a specially crafted web page, potentially leading to arbitrary code execution. The problem arises from memory corruption issues, which have been addressed with improved memory handling.

A remote code execution issue exists due to the way Microsoft browsers access objects in memory. This could allow an attacker to execute arbitrary code in the context of the current user by corrupting memory. If the current user has administrative rights, the attacker could take control of the affected system, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights.

An information disclosure issue exists due to Microsoft Edge's improper handling of objects in memory. This could allow an attacker to obtain information that could be used to further compromise the user's system.

A remote code execution issue exists due to improper memory object access in Microsoft Edge, potentially allowing an attacker to execute arbitrary code in the context of the current user. This could lead to an attacker gaining the same user rights as the current user. If the current user has administrative rights, the attacker could take control of the affected system, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights.

An information disclosure issue exists due to Microsoft Edge's improper handling of objects in memory. This could allow an attacker to obtain information that could be used to further compromise the user's system.

An out-of-bounds read issue was addressed through improved input validation.

A remote code execution issue exists when components of Windows, .NET Framework, Office, Lync, and Silverlight fail to properly handle TrueType fonts. An attacker who successfully exploited this issue could take complete control of the affected system, allowing them to install programs, view, change, or delete data, or create new accounts with full user rights.

The issue allows remote attackers to bypass file system write operation restrictions.

A race condition in Adobe Flash Player and Adobe AIR allows attackers to bypass the Internet Explorer Protected Mode protection mechanism. This issue can be exploited via unspecified vectors.