Rotiple

**Name of the Vulnerable Software and Affected Versions** iPadOS versions prior to 17.7.4 macOS Ventura versions prior to 13.7.3 macOS Sonoma versions prior to 14.7.3 visionOS versions prior to 2.3 iOS versions prior to 18.3 iPadOS versions prior to 18.3 macOS Sequoia versions prior to 15.3 watchOS versions prior to 11.3 tvOS versions prior to 18.3 **Description** The issue is related to incorrect clearing or release of resources in the CoreMedia component of macOS, iOS, iPadOS, watchOS, tvOS, and visionOS operating systems. Parsing a file may lead to an unexpected app termination. Exploitation of this issue may allow a remote attacker to cause a denial of service. **Recommendations** For iPadOS versions prior to 17.7.4, update to iPadOS 17.7.4 or later. For macOS Ventura versions prior to 13.7.3, update to macOS Ventura 13.7.3 or later. For macOS Sonoma versions prior to 14.7.3, update to macOS Sonoma 14.7.3 or later. For visionOS versions prior to 2.3, update to visionOS 2.3 or later. For iOS versions prior to 18.3, update to iOS 18.3 or later. For iPadOS versions prior to 18.3, update to iPadOS 18.3 or later. For macOS Sequoia versions prior to 15.3, update to macOS Sequoia 15.3 or later. For watchOS versions prior to 11.3, update to watchOS 11.3 or later. For tvOS versions prior to 18.3, update to tvOS 18.3 or later.

**Name of the Vulnerable Software and Affected Versions** Microsoft Outlook versions prior to the fixed version **Description** The vulnerability is a zero-click remote code execution (RCE) flaw in Microsoft Outlook, caused by a memory corruption issue in the `UtOlePresStmToContentsStm` function of the ole32.dll library. This function is used to process embedded OLE objects in RTF files. The vulnerability can be exploited by sending a specially crafted email to the victim, which can execute arbitrary code on the victim's machine without requiring any user interaction. The estimated number of potentially affected devices worldwide is not specified, but the vulnerability is considered critical due to its high severity and potential for remote code execution. **Recommendations** To resolve the issue, update Microsoft Outlook to the latest version, which includes the fix for this vulnerability. Additionally, consider implementing the following mitigation measures: - Enable text-based preview of attachments in Outlook - Block RTF files from untrusted sources - Use antivirus software and SIEM systems to detect and prevent exploitation attempts - Restrict remote access to vulnerable systems - Educate users to avoid opening suspicious email attachments and to use plain text email viewing to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Microsoft Word (affected versions not specified) Microsoft Office (affected versions not specified) Microsoft 365 Apps for Enterprise (affected versions not specified) **Description** The issue is related to a remote code execution problem in Microsoft Word, associated with the handling of DOCX files and the dereferencing of an uninitialized pointer. This could allow a remote attacker to execute arbitrary code. The estimated number of potentially affected devices worldwide is not specified. There is no information provided about real-world incidents where this issue was exploited. **Recommendations** For Microsoft Word, update to a version that includes a fix for the uninitialized pointer issue. For Microsoft Office, consider disabling the DOCX file parsing functionality until a patch is available. For Microsoft 365 Apps for Enterprise, restrict access to potentially vulnerable components to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows PrintWorkflowUserSvc (affected versions not specified) Description: The issue is related to an elevation of privilege vulnerability in the Windows PrintWorkflowUserSvc. It is associated with the use of memory after it has been freed. Exploitation of this issue may allow an attacker to elevate their privileges. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows PrintWorkflowUserSvc (affected versions not specified) Description: The issue is related to the use of memory after it has been freed in the Windows PrintWorkflowUserSvc service, which can allow an attacker to elevate their privileges. This can affect the system, potentially leading to increased access for malicious actors. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 124.0.6367.60 Microsoft Edge (affected versions not specified) **Description** The issue is related to a use after free vulnerability in the QUIC protocol implementation, which could allow a remote attacker who has compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. This may enable the attacker to access confidential information. **Recommendations** For Google Chrome versions prior to 124.0.6367.60, update to version 124.0.6367.60 or later to resolve the issue. For Microsoft Edge, at the moment, there is no information about a newer version that contains a fix for this vulnerability.