Yunhai Zhang

توجد مشكلة في خدمة Windows Print Spooler تتعلق بالإدارة غير الآمنة للصلاحيات. تسمح هذه الثغرة للمهاجمين عن بُعد بتنفيذ رمز عشوائي، وتصعيد الصلاحيات، والتأثير على النظام.

The issue is related to the Linux kernel's video driver, specifically the `vgacon scrollback cur()` function, which is vulnerable to an out-of-bounds write. This can be exploited by a local attacker when resizing the console, potentially leading to a system crash and possibly escalating privileges. The main concerns are data confidentiality, integrity, and system availability.

Name of the Vulnerable Software and Affected Versions: Microsoft Edge (affected versions not specified) Description: A remote code execution issue exists due to improper memory object access. This could lead to memory corruption, allowing an attacker to execute arbitrary code as the current user. If the user has administrative rights, the attacker could gain control of the system, enabling them to install programs, modify or delete data, or create new accounts with full rights. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.