Boris Larin

A type confusion issue exists in the V8 JavaScript and WebAssembly engine. This flaw allows a remote attacker to execute arbitrary code within a sandbox by enticing a user to visit a specially crafted HTML page. Real-world exploitation has been observed by the Lazarus APT group, which used a fake blockchain-based tank game to deliver the exploit and gain full control over target computers. The attack involves using the type confusion to obtain read and write access to the entire address space of the Chrome process from JavaScript, followed by a second flaw to bypass the V8 sandbox.

The issue is related to an elevation of privilege vulnerability in the Windows DWM Core Library. This vulnerability allows attackers to affect the system. It has been linked to cyberattacks involving QakBot, a notorious banking trojan. The vulnerability is being actively exploited by QakBot and other malware. Researchers have identified a new zero-day vulnerability in Windows, designated as this issue, and it is being used by multiple attackers.

An issue exists where an app may be able to modify sensitive kernel state due to a memory out-of-bounds operation. The flaw involves the use of undocumented MMIO (Memory-Mapped I/O) registers in Apple SoCs, which allows attackers to bypass hardware security protections and manipulate protected kernel memory to gain full control of the device. This issue was part of a campaign known as Operation Triangulation, where attackers could deliver a malicious iMessage attachment to compromise a device without any user interaction. There are reports that this issue was actively exploited against iOS versions released before iOS 15.7.1.

An integer overflow occurs due to insufficient input validation, which may allow an application to execute arbitrary code with kernel privileges. An integer overflow is a condition where an arithmetic operation attempts to create a numeric value that is outside of the range that can be represented with a given number of bits. This issue has been reported as actively exploited against versions of iOS released before iOS 15.7. In real-world incidents, this flaw was used as part of a sophisticated spyware campaign to gain root privileges on target devices, enabling the deployment of a backdoor for stealing iCloud keychain data, recording microphone audio, and tracking location.

The issue is related to an elevation-of-privilege vulnerability in the Windows Common Log File System (CLFS) Driver. This vulnerability allows attackers to affect the system. It has been exploited in the wild, with ransomware operators using it to target victims. The vulnerability is associated with a buffer overflow in memory, which can be exploited to elevate privileges. There have been reports of this vulnerability being used by ransomware groups, including Nokoyawa, in attacks on small and medium-sized businesses in various regions.

This vulnerability is a memory corruption issue within WebKit, potentially allowing arbitrary code execution. The issue stems from improved state management and has been reported as actively exploited in the wild against iOS versions released before iOS 15.7. The vulnerability affects multiple Apple products, including Safari, iOS, and iPadOS, as well as WebKitGTK. The root cause involves a memory corruption issue within WASM due to allowing moving of not fitting offsets into instruction.

The issue is related to the processing of font files, which may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.1. The vulnerability is associated with a buffer overflow in the FontParser component of Apple's operating systems. It is estimated that a large number of devices may be affected, but the exact number is not specified. The issue was addressed with improved handling of caches.

An elevation-of-privilege issue exists in the Win32k component (`win32kfull.sys`) of the Windows operating system. The flaw is caused by a use-after-free condition, which occurs when the kernel invokes user-mode callbacks and incorrectly assumes that an object remains unchanged after the callback returns. An attacker can exploit this by modifying, freeing, or replacing the object to gain elevated privileges on the system.

The issue is related to errors in privilege management in the Windows Kernel, specifically affecting the ntoskrnl.exe file. This can allow an attacker to gain unauthorized access to protected information. The vulnerability enables attackers to obtain sensitive information and potentially affect the system.

The issue is related to a privilege escalation vulnerability in the Windows operating system, specifically in the Desktop Window Manager. It is caused by a buffer overflow in memory, which can be exploited by an attacker using a specially crafted application to elevate their privileges. The vulnerability has been used in the wild, with reports of exploitation. There is no information on the estimated number of potentially affected devices worldwide.

The issue is caused by a buffer overflow in the memory of the Win32k component (Win32k.sys) in Windows operating systems. This can allow an attacker to execute arbitrary code using a specially crafted application. The vulnerability exists due to Windows improperly handling calls to Win32k.sys, which can lead to an elevation of privilege.

The issue is related to errors in handling objects in memory by the Windows kernel, which can allow an attacker to elevate their privileges and execute arbitrary code using a specially crafted application. This affects various Windows versions, including Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, and Windows 10 Servers. An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory.