Seungyun Lee

Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

A use after free issue in Windows Push Notification Core allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed.

A heap-based buffer overflow occurs in Winlogon, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a condition where a program writes more data to a heap memory buffer than it can hold, potentially leading to memory corruption.

Opening a software project in the application could trigger the execution of malicious code. The issue occurs because the application invokes `git.exe` by name rather than specifying the full path to a trusted executable. This allows Windows to potentially locate and execute a malicious file named `git.exe` placed within the opened project directory instead of the legitimate Git program. An attacker can exploit this by placing a malicious executable inside a repository that a user opens.

A logic issue exists due to improper state management. Processing maliciously crafted web content may lead to unexpected behavior.

The issue is related to the use of an unreliable path search in Microsoft Office and Microsoft 365 Apps for Enterprise. This allows an attacker to execute arbitrary code. The vulnerability affects Word, PowerPoint, and Outlook. It is described as a logic bug that includes built-in process control and built-in PV bypass.

The issue allows remote attackers to execute arbitrary code and affect the system. It is reported that this issue has been patched by Microsoft with the aid of external researchers.

The issue is related to insufficient input validation in the Windows Upgrade Assistant. This can allow a remote attacker to execute arbitrary code.

The issue is related to a DLL hijacking vulnerability in the G-RAID 4/8 Software Utility setups for Windows. This vulnerability could lead to arbitrary code execution in the context of the system user.

The issue is related to incorrect code generation management in the Click-to-Run (C2R) service for Microsoft Office and Microsoft 365 Apps for Enterprise packages. Exploitation of this issue may allow an attacker to execute arbitrary code.