Junhyuk Im

A heap-based buffer overflow occurs in Winlogon, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a condition where a program writes more data to a heap memory buffer than it can hold, potentially leading to memory corruption.

A use after free issue in Windows Push Notification Core allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed.

Opening a software project in the application could trigger the execution of malicious code. The issue occurs because the application invokes `git.exe` by name rather than specifying the full path to a trusted executable. This allows Windows to potentially locate and execute a malicious file named `git.exe` placed within the opened project directory instead of the legitimate Git program. An attacker can exploit this by placing a malicious executable inside a repository that a user opens.

A logic issue exists due to improper state management. Processing maliciously crafted web content may lead to unexpected behavior.

The issue allows remote attackers to execute arbitrary code and affect the system. It is reported that this issue has been patched by Microsoft with the aid of external researchers.

The issue is related to the use of an unreliable path search in Microsoft Office and Microsoft 365 Apps for Enterprise. This allows an attacker to execute arbitrary code. The vulnerability affects Word, PowerPoint, and Outlook. It is described as a logic bug that includes built-in process control and built-in PV bypass.