Jean-Jamil Khalife

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.

An out-of-bounds write in the Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network. An out-of-bounds write occurs when a program writes data past the end of the intended buffer, which can lead to memory corruption and arbitrary code execution.

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.

A heap-based buffer overflow occurs in the Windows System Information Console. This issue allows an unauthorized remote attacker to execute arbitrary code over a network, potentially compromising the affected system.

The Netskope client service, running with NTSYSTEM privileges, accepts network connections from localhost to start various services and execute commands. A connection handling function in the service uses a relative path to download and unzip configuration files, allowing local users to write arbitrary files in a location accessible only to higher privileged users. This can be exploited by local users to execute code with NTSYSTEM privileges on the end machine.

Name of the Vulnerable Software and Affected Versions: Microsoft Skype versions through 8.59.0.77 on macOS Description: The issue allows a local process with the user's privileges to obtain unprompted microphone and camera access. This is achieved by loading a crafted library, which enables the process to inherit Skype Client's microphone and camera access due to the disable-library-validation entitlement. Recommendations: For Microsoft Skype versions through 8.59.0.77 on macOS, consider restricting access to the microphone and camera until a fix is available. As a temporary workaround, review and restrict any library loading capabilities to minimize the risk of exploitation.

An issue exists in the Windows kernel-mode driver (win32k.sys) due to improper handling of objects in memory. This could allow an attacker to gain elevated privileges and read arbitrary amounts of kernel memory. The attacker could then install programs, view, change, or delete data, or create new accounts with full administrative rights. To exploit this issue, an attacker would first have to log on to the system and then run a specially crafted application designed to elevate privileges.