Gal De Leon

**Name of the Vulnerable Software and Affected Versions** Windows Error Reporting (affected versions not specified) **Description** The issue is related to insufficient access restrictions in the Windows Error Reporting service of the Windows operating system. This can allow an attacker to elevate their privileges. There is an elevation-of-privilege vulnerability that enables attackers to impact the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Windows (affected versions not specified) **Description** The issue is related to the Windows Error Reporting service and is caused by improper handling of privileges. It allows an attacker to elevate their privileges. The vulnerability is also related to the improper handling of file and folder links by the Windows Error Reporting manager. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Error Reporting (WER) (affected versions not specified) **Description** The issue is related to an information disclosure problem in the Windows Error Reporting (WER) service, which lacks protection for certain data. This could allow an attacker to gain unauthorized access to protected information using a specially crafted application. The vulnerability is also described as an elevation-of-privilege issue that affects the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Jet Database Engine (affected versions not specified) **Description** A remote code execution issue exists due to the improper handling of objects in memory by the Windows Jet Database Engine. This can be exploited by remote attackers to execute arbitrary code on the system, potentially using a specially crafted file. The vulnerability is related to a buffer overflow in memory. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Error Reporting (affected versions not specified) **Description** The issue is related to insufficient input validation in the Windows Error Reporting service of Windows operating systems. This can be exploited by an attacker to elevate their privileges by deleting a target file. The vulnerability allows attackers to affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Jet Database Engine (affected versions not specified) **Description** The issue is related to a buffer overflow in memory, which can be exploited by using a specially crafted file, allowing an attacker to execute arbitrary code. This can affect the system and potentially lead to remote code execution. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Office Access Connectivity Engine (affected versions not specified) **Description** The issue is related to errors in handling objects in memory within the Microsoft Office Access Connectivity Engine. This can be exploited by a remote attacker to execute arbitrary code on a victim's system. The exploitation can occur when a victim opens a specially crafted file. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Windows Error Reporting (WER) (affected versions not specified) **Description** An elevation of privilege issue exists in the way Windows Error Reporting (WER) handles files. This vulnerability is related to insufficient access restrictions in the Windows Error Reporting service. Exploitation of this issue may allow an attacker to execute arbitrary code in kernel mode. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Jet Database Engine versions (affected versions not specified) **Description** The issue is related to a buffer overflow in memory, which can be exploited to execute arbitrary code. This can allow remote attackers to affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Jet Database Engine versions (affected versions not specified) **Description** The issue is related to a buffer overflow in memory, which can be exploited to execute arbitrary code. This can allow remote attackers to affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Jet Database Engine versions (affected versions not specified) **Description** The issue is related to a buffer underflow in memory, which can be exploited to execute arbitrary code. This can allow a remote attacker to affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft JET Database Engine (affected versions not specified) **Description** The issue is related to errors in processing objects in memory. It may allow an attacker to execute arbitrary code using a specially crafted file. Remote attackers can exploit this to execute arbitrary code and affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Office Access Connectivity Engine (affected versions not specified) **Description** A remote code execution issue exists due to improper handling of objects in memory by the Microsoft Office Access Connectivity Engine. This could allow a remote attacker to execute arbitrary code on a victim system by enticing the victim to open a specially crafted file. The vulnerability is related to a buffer overflow in memory operations. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows JET Database Engine (affected versions not specified) **Description** The issue is caused by a buffer overflow in memory, allowing an attacker to execute arbitrary code using a specially crafted file. Remote attackers can exploit this to execute arbitrary code and affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Microsoft JET Database Engine (affected versions not specified) Description: The issue exists due to errors in handling objects in memory within the Microsoft JET Database Engine of the Windows operating system. This can allow an attacker to execute arbitrary code using a specially crafted file. Remote attackers may exploit this to execute arbitrary code and affect the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows (affected versions not specified) Description: The issue is caused by a buffer overflow in the Windows Jet Database Engine component of the Windows operating system. This can be exploited by an attacker using a specially crafted file, potentially allowing them to execute arbitrary code. Remote attackers may also be able to execute arbitrary code and affect the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Microsoft JET Database Engine (affected versions not specified) Description: The issue exists due to errors in handling objects in memory within the Microsoft JET Database Engine of the Windows operating system. This can allow an attacker to execute arbitrary code using a specially crafted file. The vulnerability enables remote attackers to execute arbitrary code and affect the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Microsoft JET Database Engine (affected versions not specified) Description: The issue exists due to errors in handling objects in memory within the Microsoft JET Database Engine of the Windows operating system. This can allow an attacker to execute arbitrary code using a specially crafted file. Remote attackers may exploit this to execute arbitrary code and affect the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Office (affected versions not specified) Microsoft Office Compatibility Pack (affected versions not specified) Microsoft Word (affected versions not specified) **Description** The issue is caused by a buffer overflow in memory, allowing a remote attacker to execute arbitrary code. Exploitation requires a user to open a specially crafted file with an affected version of Microsoft Office or Microsoft WordPad software. If successfully exploited, an attacker could run arbitrary code in the context of the current user, potentially taking control of the affected system, installing programs, viewing, changing, or deleting data, or creating new accounts with full user rights. Users with fewer user rights on the system could be less impacted than those operating with administrative user rights. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Office 2007 Microsoft Office 2010 Microsoft Office 2013 Microsoft Office 2016 Microsoft Office Compatibility Pack (affected versions not specified) Microsoft WordPad (affected versions not specified) **Description** A remote code execution issue exists in the Equation Editor of Microsoft Office and WordPad due to improper memory object handling, leading to a buffer overflow. An attacker can exploit this by inducing a user to open a specially crafted file, allowing the execution of arbitrary code within the context of the current user. If the user possesses administrative privileges, the attacker could gain full control of the system, enabling them to install software, modify or delete data, and create new accounts with full user rights. This issue has been exploited by multiple Chinese threat groups since late 2018. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.