Quac Tran

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

A heap-based buffer overflow exists in Visual Studio, which could allow an unauthorized attacker to execute arbitrary code over a network. This issue involves a heap out-of-bounds write, where the application writes data past the end of a pre-allocated memory buffer on the heap.

An issue exists in the Report Execution API 'runreports' endpoint where report parameter values are incorporated into the generated SQL query without sufficient validation. This allows an authenticated user with report execution permissions to inject arbitrary SQL through crafted parameter values, potentially leading to unauthorized access to data beyond the intended scope of the report.

An integer overflow exists in ANGLE (Almost Native Graphics Layer Engine), a compatibility layer that allows OpenGL ES APIs to run on Windows. This issue allows a remote attacker who has already compromised the renderer process to access potentially sensitive information from process memory by using a specially crafted HTML page.

An unauthenticated attacker can perform message header injection due to missing inbound filtering in the `CxfRsHeaderFilterStrategy` and Knative `HeaderFilterStrategy` implementations. This allows the injection of Camel-internal headers to override configured values, which can lead to remote code execution or arbitrary file writes.