Sunglin

**Name of the Vulnerable Software and Affected Versions** Windows Point-to-Point Tunneling Protocol (affected versions not specified) **Description** The issue is related to the implementation of the Point-to-Point Tunneling Protocol (PPTP) in Windows operating systems, specifically concerning synchronization errors when using a shared resource, known as a "race condition". This can be exploited by a remote attacker to execute arbitrary code. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Point-to-Point Tunneling Protocol (affected versions not specified) **Description** The issue is related to the implementation of the Point-to-Point Tunneling Protocol (PPTP) in Windows operating systems, specifically concerning synchronization errors when using a shared resource, known as a "race condition". This can be exploited by a remote attacker to execute arbitrary code. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Kernel (affected versions not specified) **Description** The issue is related to an elevation-of-privilege vulnerability in the Windows Kernel, which can be caused by a buffer overflow. This vulnerability allows an attacker to potentially increase their privileges on the system. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** FreeRDP versions prior to 2.4.1 **Description** The issue is related to out of bound writes in a connected client. A malicious server might trigger this by sending `0` width/height or out of bound rectangles to the client using GDI or SurfaceCommands for graphics updates. This results in missing bounds checks, allowing writes to unallocated memory regions. **Recommendations** For versions prior to 2.4.1, update to FreeRDP 2.4.1 to resolve the issue. As a temporary workaround, consider restricting access to GDI or SurfaceCommands until the update is applied. Avoid using connections with `0` width/height or out of bound rectangles in the affected API endpoints until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 14.7 Apple macOS versions prior to Big Sur 11.5 Apple watchOS versions prior to 7.6 Apple tvOS versions prior to 14.7 Apple macOS Mojave versions prior to Security Update 2021-005 Apple macOS Catalina versions prior to Security Update 2021-004 **Description** An integer overflow issue was addressed through improved input validation. Processing a maliciously crafted font file may lead to arbitrary code execution. **Recommendations** For iOS versions prior to 14.7, update to iOS 14.7 or later. For macOS Big Sur versions prior to 11.5, update to macOS Big Sur 11.5 or later. For watchOS versions prior to 7.6, update to watchOS 7.6 or later. For tvOS versions prior to 14.7, update to tvOS 14.7 or later. For macOS Mojave, apply Security Update 2021-005 or later. For macOS Catalina, apply Security Update 2021-004 or later.

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 14.7 Apple macOS versions prior to Big Sur 11.5 Apple watchOS versions prior to 7.6 Apple tvOS versions prior to 14.7 Apple macOS Catalina versions prior to Security Update 2021-004 **Description** The issue is related to an out-of-bounds read that may lead to arbitrary code execution when processing a maliciously crafted font file. This is due to insufficient input validation in the CoreText TTF parsing component. **Recommendations** For iOS versions prior to 14.7, update to iOS 14.7 or later. For macOS versions prior to Big Sur 11.5, update to macOS Big Sur 11.5 or later. For watchOS versions prior to 7.6, update to watchOS 7.6 or later. For tvOS versions prior to 14.7, update to tvOS 14.7 or later. For macOS Catalina versions prior to Security Update 2021-004, apply Security Update 2021-004 or later.

**Name of the Vulnerable Software and Affected Versions** Apple tvOS versions prior to 14.6 Apple iOS versions prior to 14.6 Apple iPadOS versions prior to 14.6 Apple macOS versions prior to 11.4 Apple watchOS versions prior to 7.5 macOS Catalina versions prior to Security Update 2021-004 macOS Mojave versions prior to Security Update 2021-005 **Description** The issue is related to an out-of-bounds read in the CoreText application programming interface of Apple operating systems, including iOS, macOS, iPadOS, iPhoneOS, watchOS, and tvOS. This occurs when processing a maliciously crafted font file, potentially allowing a remote attacker to access protected information. The exploitation of this issue may result in the disclosure of process memory. **Recommendations** For tvOS versions prior to 14.6, update to tvOS 14.6 or later. For iOS versions prior to 14.6, update to iOS 14.6 or later. For iPadOS versions prior to 14.6, update to iPadOS 14.6 or later. For macOS Big Sur versions prior to 11.4, update to macOS Big Sur 11.4 or later. For watchOS versions prior to 7.5, update to watchOS 7.5 or later. For macOS Catalina, apply Security Update 2021-004 or later. For macOS Mojave, apply Security Update 2021-005 or later.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 11.4 tvOS versions prior to 14.6 watchOS versions prior to 7.5 iOS versions prior to 14.6 iPadOS versions prior to 14.6 **Description** The issue is related to the processing of maliciously crafted fonts, which may result in the disclosure of process memory due to an out-of-bounds read. This can potentially allow an attacker to access protected information. The problem was addressed with improved input validation. **Recommendations** For macOS versions prior to 11.4, update to macOS Big Sur 11.4 or later. For tvOS versions prior to 14.6, update to tvOS 14.6 or later. For watchOS versions prior to 7.5, update to watchOS 7.5 or later. For iOS versions prior to 14.6, update to iOS 14.6 or later. For iPadOS versions prior to 14.6, update to iPadOS 14.6 or later.