Ricardo Narvaja

A DLL Hijacking caused by drive remapping combined with a poisoning of the activation cache in Microsoft Windows allows a malicious authenticated attacker to elevate from a medium integrity process to a high integrity process without the intervention of a UAC prompt. This issue can be exploited to bypass user access control and gain full system privileges. The vulnerability is actively being exploited.

A Denial of Service in the CLFS.sys driver allows a malicious authenticated low-privilege user to cause a Blue Screen of Death via a forced call to the `KeBugCheckEx` function. The vulnerability is caused by improper validation of specified quantities in input data, leading to an unrecoverable inconsistency. This flaw can be exploited to crash systems repeatedly, disrupting operations. The estimated number of potentially affected devices worldwide is not specified.

A stack-based buffer overflow issue allows remote attackers to execute arbitrary code via the `UserName` parameter.

A stack-based buffer overflow issue allows remote attackers to execute arbitrary code via the `password` parameter.

A buffer overflow issue allows remote attackers to execute arbitrary code via a crafted PCT file.

The issue allows user-assisted remote attackers to cause a denial of service and execute arbitrary code via a long string in a version attribute of an `ispXCF` element in an `.xcf` file.

The issue allows remote attackers to execute arbitrary code via a crafted width in an NSV file. This is related to the libdirectx plugin.dll component.

A remote code execution issue exists in the way Word handles specially crafted Word files, potentially allowing arbitrary code execution if a user opens a malformed file. This could be triggered by a crafted lcbPlcfBkfSdt field in the File Information Block (FIB), bypassing an initialization step and causing an "arbitrary free." Users with fewer user rights on the system may be less impacted than those operating with administrative rights.