Wei Lei

Name of the Vulnerable Software and Affected Versions: Windows Cloud Files Mini Filter Driver (affected versions not specified) Description: The issue is related to type confusion errors in the Windows Cloud Files Mini Filter Driver, which can be exploited to disclose protected information. This allows attackers to obtain sensitive information and potentially affect the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is related to a vulnerability in the kernel mode layer handler for DxgkDdiEscape, where an unprivileged regular user can cause exposure of sensitive information to an actor that is not explicitly authorized to have access to that information, which may lead to limited information disclosure.

The issue is related to a null-pointer dereference in the kernel mode layer handler for `DxgkDdiEscape` in the `nvlddmkm.sys` file, which may lead to denial of service.

The issue is related to insufficient input validation in the VM3DMP driver of VMware Tools for Windows, which can lead to a denial-of-service condition. A malicious actor with local user privileges in the Windows guest OS can trigger a PANIC in the VM3DMP driver, causing the denial-of-service condition.

The issue is related to an out-of-bounds read vulnerability in the Shader functionality. A malicious actor with non-administrative local access to a virtual machine with 3D graphics enabled may be able to exploit this vulnerability to crash the virtual machine's vmx process, leading to a partial denial of service condition.

Name of the Vulnerable Software and Affected Versions: Intel Graphics Driver versions prior to 26.20.100.7212 Description: The issue is caused by insufficient input validation in the Intel Graphics Driver, which may allow an authenticated user to cause a denial of service via local access. Recommendations: For versions prior to 26.20.100.7212, update to version 26.20.100.7212 or later to resolve the issue.

The issue is caused by a stack-based buffer under-read in the `php stream url wrap http ex` function when parsing an HTTP response. This results in copying a large string. The vulnerability can be exploited by a remote attacker using a specially crafted HTTP response, potentially allowing them to execute arbitrary code or cause a denial of service.

The issue is related to an out-of-bounds read in the ext/date/lib/parse date.c component of the PHP interpreter. This could allow a remote attacker to leak information from the interpreter by supplying specially crafted date strings. The error is specifically in the timelib meridian handling of 'front of' and 'back of' directives in the date extension, affecting the php parse date function.

The issue involves the WebKit component and allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted web site.

The issue involves the WebKit component and allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted web site.

The issue involves the WebKit component and allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted web site.

A stack-based buffer overflow in the `zend ini do op()` function could cause a denial of service or potentially allow executing code. This issue is relevant for PHP applications that accept untrusted input for the `parse ini string` or `parse ini file` function.

The issue is related to the openssl extension in PHP, specifically with the PEM sealing code not checking the return value of the OpenSSL sealing function. This could lead to a crash of the PHP interpreter due to an interpretation conflict for a negative number. The problem is also associated with insufficient checking of unusual or exceptional states, which could allow a remote attacker to cause a denial of service.

The issue is caused by a buffer overflow in Adobe Reader and Adobe Acrobat, allowing a remote attacker to execute arbitrary code or cause a denial of service (memory corruption).

The issue is caused by a buffer overflow in the libxml2 library, which can be exploited by a remote attacker using a specially crafted XML document. This can lead to arbitrary code execution or a denial of service due to memory corruption. The vulnerability is also described as a use-after-free issue in the `xmlDictComputeFastKey` function, allowing remote attackers to cause a denial of service.

The issue is caused by a buffer overflow in the libxml2 library, which can be exploited by a remote attacker using a specially crafted XML document. This can lead to arbitrary code execution or a denial of service (memory corruption). The vulnerability is also described as a use-after-free issue in the `xmlSAX2AttributeNs` function, allowing remote attackers to cause a denial of service via a crafted XML document.

The issue is caused by multiple use-after-free vulnerabilities in the `htmlParsePubidLiteral` and `htmlParseSystemiteral` functions in libxml2. This allows remote attackers to cause a denial of service via a crafted XML document. Additionally, the vulnerability can be exploited to execute arbitrary code or cause a denial of service due to a buffer overflow, by using a specially formed XML document.

The issue is related to the xmlParseElementDecl function in parser.c, which allows context-dependent attackers to cause a denial of service. This can be achieved through a crafted file, involving xmlParseName, and may result in a heap-based buffer underread and application crash. The vulnerability is also associated with a buffer overflow in memory.

The issue allows remote attackers to obtain sensitive information or cause a denial of service due to memory corruption via a crafted XML document.

The issue allows remote attackers to obtain sensitive information or cause a denial of service due to memory corruption via a crafted XML document.