Vlad Stolyarov

A use after free issue exists in Canvas, which allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to visit a specially crafted HTML page. Use after free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed.

A type confusion issue exists in the V8 engine, which is the open-source JavaScript and WebAssembly engine used by the browser. This flaw allows a remote attacker to execute arbitrary code within the sandbox by inducing the browser to process a specially crafted HTML page.

A use after free issue exists in the Modularization component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote attacker can exploit this by inducing a user to open a crafted HTML page, allowing the execution of arbitrary code within the sandbox.

The software contains multiple memory corruption issues due to inadequate input validation. Processing a maliciously crafted texture may cause unexpected application termination.

An integer truncation issue exists in the Aggregate Term Handler component of SQLite. This occurs when the number of aggregate terms exceeds the number of available columns, which can lead to memory corruption. This flaw was identified as a zero-day known only to threat actors before being discovered by Google's Big Sleep AI agent. Exploitation of this issue could allow a remote attacker to impact confidentiality, integrity, and availability, potentially enabling arbitrary code execution, privilege escalation, and lateral movement within networked industrial systems, such as the Siemens RUGGEDCOM CROSSBOW SAC.

A high-severity vulnerability exists in the ANGLE and GPU components of Google Chrome and Chromium-based browsers. This flaw involves improper validation of untrusted input, potentially allowing a remote attacker to escape the browser's sandbox via a crafted HTML page. This could lead to remote code execution. The vulnerability is actively being exploited in the wild. Apple's Safari, which utilizes the WebKit engine, is also affected.

A null pointer dereference in Windows Kernel Memory allows an authorized attacker to deny service locally.

Name of the Vulnerable Software and Affected Versions: Windows Subsystem for Linux (affected versions not specified) Description: The issue is related to an untrusted pointer dereference, which allows an unauthorized attacker to execute code locally. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The vulnerability is an elevation-of-privilege issue in the Windows Task Scheduler, allowing attackers to elevate their privileges to Medium Integrity level and gain the ability to execute RPC functions restricted to privileged accounts. This vulnerability has been exploited in the wild, with the RomCom group executing malicious code outside the Firefox sandbox and launching malware from C&C servers. The attack can be performed from an AppContainer restricted environment.

The issue is related to an elevation of privilege vulnerability in the Windows DWM Core Library. This vulnerability allows attackers to affect the system. It has been linked to cyberattacks involving QakBot, a notorious banking trojan. The vulnerability is being actively exploited by QakBot and other malware. Researchers have identified a new zero-day vulnerability in Windows, designated as this issue, and it is being used by multiple attackers.

The issue is related to insufficient input validation in the drm/amdgpu component of the Linux kernel. This can lead to a denial of service. The vulnerability is associated with the functions `amdgpu vm bo insert map()`, `amdgpu vm bo map()`, `amdgpu vm bo replace map()`, and `amdgpu vm bo clear mappings()` in the file drivers/gpu/drm/amd/amdgpu/amdgpu vm.c. The parameters of `amdgpu vm bo (map/replace map/clearing mappings)` are not validated clearly, which can be exploited to cause a denial of service.

This issue is a security feature bypass vulnerability affecting the SmartScreen Prompt Security Feature in Microsoft Windows. The vulnerability allows attackers to bypass SmartScreen, potentially delivering malicious software to a target system. Exploitation requires user interaction, such as opening a specially crafted file or clicking a malicious link. Reports indicate that this vulnerability is being actively exploited in the wild, and it is related to CVE-2024-21412, which has been exploited by the Water Hydra APT group. The vulnerability impacts the security of web page shortcut prompts.

A security feature bypass exists in the handling of Internet Shortcut (.URL) files. The issue stems from a protection mechanism failure where Windows fails to correctly propagate Mark-of-the-Web (MotW) zone identifiers—a mechanism used to mark files downloaded from the internet as untrusted—when parsing these files. This allows attackers to bypass Microsoft Defender SmartScreen and other security warnings, enabling the silent delivery and execution of malware. Exploitation occurs when a user opens a specially crafted .URL file, which can be delivered via email, SharePoint, or network shares. In some cases, attackers use a double-shortcut technique where a file disguised as a `.jpeg` is actually a `.url` file that points to another shortcut to trigger the bypass. This flaw has been actively exploited in ransomware campaigns and by the APT group Water Hydra to deliver info-stealers and the DarkGate malware, often executing commands via `rundll32.exe` or `ieframe.dll`.

A heap buffer overflow in WebRTC allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. The vulnerability is actively exploited and may cause crashes or code execution. The issue is due to a heap buffer overflow weakness in the open-source WebRTC framework.

An issue exists in the way Windows Search and Microsoft Office process input data, specifically related to HTML. A remote attacker can execute arbitrary code on a system by inducing a user to open a specially crafted malicious Microsoft Office document. This flaw allows for a Mark-of-the-Web (MotW) bypass, enabling the planting of files without the MotW security attribute using Windows Search.

The issue is related to an elevation-of-privilege vulnerability in the Windows Error Reporting Service, which allows attackers to affect the system. This vulnerability is associated with insecure privilege management and can be exploited to gain administrator privileges on a Windows device. There have been reports of this vulnerability being exploited in the wild. The Falcon Complete MDR team has discovered and blocked a zero-day exploit affecting Windows Error Reporting.

The issue is related to a security feature bypass vulnerability in Microsoft Windows SmartScreen. This vulnerability can be exploited by an attacker to bypass security restrictions by loading specially crafted malicious files. The vulnerability is associated with errors in security settings. There have been real-world incidents where this issue was exploited, including its use by Magniber ransomware actors.