Boolgombear

An integer overflow or wraparound in the HID Parser Library allows an unauthorized attacker to elevate privileges through a physical attack.

A heap-based buffer overflow occurs in the Windows Subsystem for Linux, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruption issue that happens when a program writes more data to a heap-allocated buffer than it can hold.

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

Improper access control in the Windows Remote Access API allows an authorized attacker to perform local tampering, which can affect the system.

Name of the Vulnerable Software and Affected Versions: Microsoft Office Excel (affected versions not specified) Description: A heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. The vulnerability allows remote attackers to execute arbitrary code and affect the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is related to a remote code execution problem in Microsoft Excel. It is associated with the dereferencing of an untrusted pointer in Microsoft Office and 365 Apps for Enterprise packages. Exploitation of this issue could allow an attacker to execute arbitrary code.

Name of the Vulnerable Software and Affected Versions: Microsoft Excel (affected versions not specified) Description: The issue is related to a remote code execution problem in Microsoft Excel. It involves the use of memory after it has been freed, which can be exploited by an attacker to execute arbitrary code. This could potentially affect the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.