Jq0904

**Name of the Vulnerable Software and Affected Versions** Microsoft Office Excel (affected versions not specified) **Description** A heap-based buffer overflow exists in Microsoft Office Excel. This issue allows an unauthorized attacker to execute code locally. Exploitation may allow an attacker to execute arbitrary code and affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Microsoft Office Word (affected versions not specified) Description: An untrusted pointer dereference exists in Microsoft Office Word, potentially allowing an unauthorized attacker to disclose information locally. The vulnerability enables attackers to obtain sensitive information and affect the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Microsoft Office Excel (affected versions not specified) Description: A use-after-free issue exists in Microsoft Office Excel. This allows an unauthorized attacker to execute code locally. The vulnerability enables remote attackers to execute arbitrary code and affect the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Microsoft Office Excel (affected versions not specified) Description: A buffer over-read in Microsoft Office Excel can allow an unauthorized attacker to disclose information locally. This issue enables attackers to obtain sensitive information and affect the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Microsoft Office Excel (affected versions not specified) Description: A use-after-free issue exists in Microsoft Office Excel. This allows an unauthorized attacker to execute code locally. The vulnerability enables remote attackers to execute arbitrary code and affect the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Microsoft Office Excel (affected versions not specified) Description: An out-of-bounds read issue exists in Microsoft Office Excel. This allows a remote attacker to execute arbitrary code, potentially affecting the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Windows versions prior to the November patch **Description** The issue is related to a buffer overflow in the memory of the Microsoft DWM Core Library in Windows operating systems. This can allow an attacker to escalate their privileges. An elevation-of-privilege vulnerability exists, enabling attackers to affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Streaming Service Proxy (affected versions not specified) **Description** An elevation-of-privilege issue exists in the Microsoft Streaming Service Proxy for Windows operating systems. The flaw is caused by a memory buffer overflow, which occurs when an operation exceeds the allocated memory boundaries. A successful exploit could allow an attacker to increase their privilege level on the affected system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Safari versions prior to 16 iOS versions prior to 15.7 and 16 iPadOS versions prior to 15.7 macOS versions prior to Ventura 13 **Description** An access issue was addressed with improvements to the sandbox, which may allow a sandboxed process to circumvent sandbox restrictions. **Recommendations** For Safari versions prior to 16, update to Safari 16. For iOS versions prior to 15.7 and 16, update to iOS 15.7 or iOS 16. For iPadOS versions prior to 15.7, update to iPadOS 15.7. For macOS versions prior to Ventura 13, update to macOS Ventura 13.

**Name of the Vulnerable Software and Affected Versions** Windows Mobile Device Management (affected versions not specified) **Description** The issue is related to incorrect code generation management in Windows Mobile Device Management, which can be exploited by remote attackers to execute arbitrary code and affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Geolocation Service (affected versions not specified) **Description** The issue is related to incorrect code generation management in the Windows Geolocation Service of Windows operating systems. It allows remote attackers to execute arbitrary code and affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Modern Execution Server (affected versions not specified) **Description** The issue is related to errors in code generation management in the Modern Execution Server component of Windows operating systems. It allows remote attackers to execute arbitrary code by sending a specially crafted request. This can affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** tvOS versions prior to 15.2 macOS Monterey versions prior to 12.1 Safari versions prior to 15.2 iOS versions prior to 15.2 iPadOS versions prior to 15.2 watchOS versions prior to 8.3 **Description** A use after free issue was addressed with improved memory management. Processing maliciously crafted web content may lead to arbitrary code execution. The issue is related to the use of memory after it has been freed, which can be exploited by a remote attacker to execute arbitrary code when processing malicious web content. **Recommendations** For tvOS versions prior to 15.2, update to tvOS 15.2 or later. For macOS Monterey versions prior to 12.1, update to macOS Monterey 12.1 or later. For Safari versions prior to 15.2, update to Safari 15.2 or later. For iOS versions prior to 15.2, update to iOS 15.2 or later. For iPadOS versions prior to 15.2, update to iPadOS 15.2 or later. For watchOS versions prior to 8.3, update to watchOS 8.3 or later.

**Name of the Vulnerable Software and Affected Versions** Microsoft DWM Core Library (affected versions not specified) **Description** The issue is related to errors in privilege management within the Microsoft DWM Core Library of the Windows operating system. Exploitation of this issue may allow an attacker to escalate their privileges. It is an elevation-of-privilege vulnerability that allows attackers to affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Excel (affected versions not specified) **Description** A remote code execution issue exists in Microsoft Excel software due to improper handling of objects in memory. This could allow an attacker to execute arbitrary code using a specially crafted file. If successfully exploited, an attacker could run code in the context of the current user. If the user has administrative rights, the attacker could take control of the system, install programs, view, change, or delete data, or create new accounts with full user rights. Users with fewer user rights may be less impacted than those with administrative rights. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.