Yunhai Zhang

An issue exists in the Windows Print Spooler related to insecure privilege management. This flaw allows remote attackers to execute arbitrary code, escalate privileges, and impact the system.

The issue is related to the Linux kernel's video driver, specifically the `vgacon scrollback cur()` function, which is vulnerable to an out-of-bounds write. This can be exploited by a local attacker when resizing the console, potentially leading to a system crash and possibly escalating privileges. The main concerns are data confidentiality, integrity, and system availability.

Name of the Vulnerable Software and Affected Versions: Microsoft Edge (affected versions not specified) Description: A remote code execution issue exists due to improper memory object access. This could lead to memory corruption, allowing an attacker to execute arbitrary code as the current user. If the user has administrative rights, the attacker could gain control of the system, enabling them to install programs, modify or delete data, or create new accounts with full rights. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.