Sunglin

The issue is related to the implementation of the Point-to-Point Tunneling Protocol (PPTP) in Windows operating systems, specifically concerning synchronization errors when using a shared resource, known as a "race condition". This can be exploited by a remote attacker to execute arbitrary code.

The issue is related to the implementation of the Point-to-Point Tunneling Protocol (PPTP) in Windows operating systems, specifically concerning synchronization errors when using a shared resource, known as a "race condition". This can be exploited by a remote attacker to execute arbitrary code.

The issue is related to an elevation-of-privilege vulnerability in the Windows Kernel, which can be caused by a buffer overflow. This vulnerability allows an attacker to potentially increase their privileges on the system. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

The issue is related to out of bound writes in a connected client. A malicious server might trigger this by sending `0` width/height or out of bound rectangles to the client using GDI or SurfaceCommands for graphics updates. This results in missing bounds checks, allowing writes to unallocated memory regions.

An integer overflow issue was addressed through improved input validation. Processing a maliciously crafted font file may lead to arbitrary code execution.

The issue is related to an out-of-bounds read that may lead to arbitrary code execution when processing a maliciously crafted font file. This is due to insufficient input validation in the CoreText TTF parsing component.

The issue is related to an out-of-bounds read in the CoreText application programming interface of Apple operating systems, including iOS, macOS, iPadOS, iPhoneOS, watchOS, and tvOS. This occurs when processing a maliciously crafted font file, potentially allowing a remote attacker to access protected information. The exploitation of this issue may result in the disclosure of process memory.

The issue is related to the processing of maliciously crafted fonts, which may result in the disclosure of process memory due to an out-of-bounds read. This can potentially allow an attacker to access protected information. The problem was addressed with improved input validation.