Guang Gong

An out-of-bounds read in Permissions allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. An out-of-bounds read occurs when a program reads data past the end of the intended buffer, which can lead to memory corruption or information disclosure.

Missing authorization in the BackgroundFetch component allows a remote attacker to bypass the web origin policy, which is a security mechanism that restricts how a document or script loaded from one origin can interact with a resource from another origin, by using a crafted HTML page.

A use-after-free issue in Microsoft Office allows an unauthorized attacker to execute arbitrary code locally or remotely. This occurs when a user is tricked into opening a malicious document, which triggers memory corruption during processing.

A command injection issue exists in Github Copilot. This allows a remote, unauthorized attacker to execute code over a network. The issue is related to a failure to sanitize data at the management level.

Name of the Vulnerable Software and Affected Versions: Microsoft Office (affected versions not specified) Description: A heap-based buffer overflow exists in Microsoft Office, potentially allowing an unauthorized attacker to execute code locally. The vulnerability may allow remote attackers to execute arbitrary code and affect the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Microsoft Office Visio (affected versions not specified) Description: A heap-based buffer overflow exists in Microsoft Office Visio that could allow an unauthorized attacker to execute code locally. The issue requires user interaction and involves crafted files. Recommendations: Apply the September 2025 Patch Tuesday update.

A use-after-free issue exists in Microsoft Office, potentially allowing an unauthorized attacker to execute code locally. The vulnerability may allow remote attackers to execute arbitrary code and affect the system. Several use-after-free bugs were identified within Microsoft Office and Word, where malicious code execution is possible upon opening a compromised document. It is reported that some of these vulnerabilities are being exploited in real-world attacks.

A heap-based buffer overflow exists in Microsoft Office PowerPoint. This issue allows an unauthorized attacker to execute code locally and potentially affect the system. The vulnerability enables remote attackers to execute arbitrary code.

The issue is related to an integer overflow or wraparound error in the model loading API. This can be triggered by loading a model with an extra-large file size, potentially leading to a denial of service.

The issue was addressed with improved bounds checks. An app may be able to execute arbitrary code with kernel privileges.

The issue is related to improved memory handling, which may allow an app to execute arbitrary code with kernel privileges. It is also described as a buffer overflow vulnerability in the Pro Res component of iOS, macOS, and iPadOS operating systems.

The issue is related to a use after free vulnerability in the Mojo IPC library, which can be exploited by a remote attacker to potentially impact the confidentiality, integrity, and availability of protected information. This can be achieved via a crafted HTML page, allowing for heap corruption.

The issue is related to a use after free in Navigation, which can be exploited by a remote attacker to potentially cause heap corruption via a crafted HTML page. This can lead to memory corruption, potentially resulting in arbitrary code execution, denial of service, or data corruption, and may also be used to escape the browser sandbox.

An out-of-bounds read issue was addressed with improved bounds checking. Processing a maliciously crafted Bluetooth packet may result in disclosure of process memory.

The issue is related to a heap buffer overflow in the SQLite component, which could allow a remote attacker to exploit heap corruption via a crafted HTML page. This may potentially lead to arbitrary code execution. The severity of this issue is classified as Medium by Chromium.

The issue allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This is due to a use after free in Camera Capture.

The issue is related to a use after free vulnerability in the Feedback service on Chrome OS in Google Chrome. This could allow a remote attacker to impact the confidentiality, integrity, and availability of protected information by exploiting heap corruption via specific UI interaction, potentially after convincing a user to install a malicious extension.

The issue is related to a use after free in the synx driver, which occurs during multiple invocations of synx release calls while performing other functions.

The issue is related to a use after free vulnerability in the password manager of Google Chrome and Microsoft Edge browsers. This vulnerability can be exploited by a remote attacker who convinces a user to perform specific UI interactions, potentially allowing the attacker to disclose protected information via a crafted HTML page.

The issue is related to a use after free in the WebUI of Google Chrome on Chrome OS, which could allow a remote attacker to potentially exploit heap corruption via specific UI interactions if the user is convinced to engage in specific actions. This could lead to the disclosure of protected information.