Dnpushme

**Name of the Vulnerable Software and Affected Versions** Microsoft Office Excel (affected versions not specified) **Description** The issue is related to a use after free vulnerability in Microsoft Office Excel, allowing an unauthorized attacker to execute code locally. This vulnerability can be exploited by remote attackers to execute arbitrary code and affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Office Excel (affected versions not specified) **Description** The issue is related to a use after free vulnerability in Microsoft Office Excel, allowing an unauthorized attacker to execute code locally. This vulnerability can be exploited by remote attackers to execute arbitrary code and affect the system. The vulnerability is associated with the use of memory after it has been freed. **Recommendations** To resolve the issue, customers running affected Mac software should install the available security update for their product. Customers running other Microsoft Office software do not need to take any action. As a temporary workaround, consider restricting access to vulnerable components of Microsoft Office Excel until a patch is applied.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 94.0.4606.81 **Description** The issue is related to a heap buffer overflow in the Blink module of Google Chrome and Microsoft Edge browsers, which occurs when processing HTML content. This can allow a remote attacker to potentially exploit heap corruption via a crafted HTML page, leading to arbitrary code execution or denial of service. **Recommendations** For Google Chrome versions prior to 94.0.4606.81, update to version 94.0.4606.81 or later to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability for Microsoft Edge.

**Name of the Vulnerable Software and Affected Versions** watchOS versions prior to 7.4.1 iOS versions prior to 14.5.1 iPadOS versions prior to 14.5.1 tvOS versions prior to 14.6 iOS versions prior to 12.5.3 macOS Big Sur versions prior to 11.3.1 **Description** A memory corruption issue was addressed with improved state management. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. **Recommendations** For watchOS versions prior to 7.4.1, update to watchOS 7.4.1 or later. For iOS versions prior to 14.5.1, update to iOS 14.5.1 or later. For iPadOS versions prior to 14.5.1, update to iPadOS 14.5.1 or later. For tvOS versions prior to 14.6, update to tvOS 14.6 or later. For iOS versions prior to 12.5.3, update to iOS 12.5.3 or later. For macOS Big Sur versions prior to 11.3.1, update to macOS Big Sur 11.3.1 or later.

Name of the Vulnerable Software and Affected Versions: Windows Graphics Device Interface Plus (GDI+) (affected versions not specified) Description: An information disclosure issue exists in the way GDI+ handles objects in memory, allowing an attacker to retrieve information from a targeted system. This issue does not allow arbitrary code execution on its own but could enable it if combined with another vulnerability. To exploit this, an attacker must log on to the system and run a specially crafted application. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Excel (affected versions not specified) **Description** A remote code execution issue exists in Microsoft Excel software due to improper handling of objects in memory. This could allow an attacker to execute arbitrary code using a specially crafted file. If successfully exploited, an attacker could run code in the context of the current user. If the user has administrative rights, the attacker could take control of the system, install programs, view, change, or delete data, or create new accounts with full user rights. Users with fewer user rights may be less impacted than those with administrative rights. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Excel (affected versions not specified) **Description** The issue is caused by a buffer overflow in memory, allowing a remote attacker to execute arbitrary code using a specially crafted file. An attacker who successfully exploits this issue could run arbitrary code in the context of the current user. If the current user has administrative rights, the attacker could take control of the affected system, install programs, view, change, or delete data, or create new accounts with full user rights. Users with limited user rights may be less impacted than those operating with administrative rights. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 10.3.3 macOS versions prior to 10.12.6 tvOS versions prior to 10.2.2 **Description** The issue involves the CoreAudio component and allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted movie file. **Recommendations** For iOS versions prior to 10.3.3, update to version 10.3.3 or later to resolve the issue. For macOS versions prior to 10.12.6, update to version 10.12.6 or later to resolve the issue. For tvOS versions prior to 10.2.2, update to version 10.2.2 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 **Description** A denial of service issue exists in the Android media framework. **Recommendations** For versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, at the moment, there is no information about a newer version that contains a fix for this issue.