Fluoroacetate

O problema está relacionado a erros no tratamento de objetos na memória dentro do componente gráfico do Windows. Isso pode ser explorado por um invasor para, potencialmente, elevar seus privilégios ou executar código arbitrário por meio de um aplicativo especialmente criado. Uma vulnerabilidade de elevação de privilégios permite que invasores afetem o sistema.

Foi detectada uma falha no componente de exportação do GetApps, que processa incorretamente a funcionalidade de abertura de outros componentes. Invasores podem induzir usuários a abrir páginas da web específicas em um ambiente de rede específico, levando ao vazamento de informações. Isso ocorre quando o componente WebView do Messaging é carregado com páginas da web maliciosas.

Esta vulnerabilidade permite que invasores remotos executem código arbitrário nos dispositivos afetados. A exploração requer interação do usuário, especificamente atender uma chamada telefônica. A falha existe nas mensagens de configuração de controle de chamadas devido à falta de validação adequada do comprimento dos dados fornecidos pelo usuário antes de copiá-los para um buffer de comprimento fixo baseado em pilha. Um invasor pode aproveitar isso para executar código no contexto do processador de banda base.

A memory corruption issue was addressed with improved memory handling, allowing an application to potentially execute arbitrary code with system privileges.

The issue is related to an elevation of privilege vulnerability in the Windows kernel, which fails to properly handle objects in memory. This can be exploited by an attacker to execute arbitrary code in kernel mode using a specially crafted application. The vulnerability is associated with insufficient access control in the Windows kernel.

The issue is related to an elevation of privilege vulnerability that exists when the Windows kernel fails to properly handle objects in memory. This can allow an attacker to execute arbitrary code and gain control over the vulnerable system. The vulnerability is associated with errors in processing objects in memory in the Windows kernel's DirectComposition component.

The issue is caused by multiple memory corruption problems and an integer overflow, which may lead to arbitrary code execution when processing maliciously crafted web content. This allows a remote attacker to execute arbitrary code.

The issue allows a low-privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks can result in the takeover of Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products.

This issue allows remote attackers to execute arbitrary code on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The specific flaw exists within the `WebAssembly.Instance` method, resulting from the lack of proper validation of user-supplied data. This can lead to a write past the end of a heap-based buffer, allowing an attacker to execute code in the context of the current process.

The issue is related to an out-of-bounds read/write vulnerability in the virtual USB 1.1 UHCI. Exploitation of this issue requires an attacker to have access to a virtual machine with a virtual USB controller present. This may allow a guest to execute code on the host.

The issue is related to a Time-of-check Time-of-use (TOCTOU) vulnerability in the virtual USB 1.1 UHCI. This vulnerability may allow a guest to execute code on the host. Exploitation requires an attacker to have access to a virtual machine with a virtual USB controller present. The vulnerability is also described as a race condition, which may allow an attacker to execute arbitrary code using the virtual USB controller.

This issue allows remote attackers to execute arbitrary code on vulnerable installations. User interaction is required, where the target must visit a malicious page or open a malicious file. The specific flaw exists within the ASN.1 parser, which does not properly validate the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this to execute code in the context of the current process.

The issue is related to memory corruption and can be triggered by processing maliciously crafted web content, potentially leading to arbitrary code execution. It is caused by a buffer overflow in the WebKit display module. A remote attacker can exploit this issue using a specially crafted web page, allowing them to execute arbitrary code.

The issue is related to memory corruption and can be triggered by processing maliciously crafted web content, potentially leading to arbitrary code execution. It is caused by a buffer overflow in the WebKit display module. A remote attacker can exploit this issue using a specially crafted web page, allowing for remote code execution.

The issue involves an out-of-bounds read that has been addressed with improved bounds checking. A malicious application may be able to elevate privileges. This is related to a privilege escalation vulnerability in the mediaserverd component.

The issue is related to an out-of-bounds read that has been addressed with improved bounds checking. A malicious application may be able to elevate privileges. This is a privilege escalation vulnerability.

The issue is related to an integer overflow when computing the required allocation size for a new JavaScript object in V8. This could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. The vulnerability may enable a remote attacker to execute arbitrary code.

The issue is related to incorrect handling of complex species in V8, allowing a remote attacker to execute arbitrary code via a crafted HTML page. This is due to a buffer overflow in the V8 JavaScript engine. The estimated number of potentially affected devices is not specified. There is no information about real-world incidents where this issue was exploited.