A remote code execution vulnerability exists due to the way the Windows GDI component handles objects in the memory. An attacker who successfully exploits this vulnerability could take control of the affected system.
// weekly digest
Loading…
Loading…
// weekly digest
// weekly digest
2022-05-23 00:00 UTC 2022-05-29 23:59 UTC
// total
0
// critical
0
// high
0
// medium
0
// low
0
// new kev
75
// top critical
No CRITICAL CVEs published this week.
// top high
No HIGH CVEs published this week.
// new kev additions
A remote code execution vulnerability exists due to the way the Windows GDI component handles objects in the memory. An attacker who successfully exploits this vulnerability could take control of the affected system.
Oracle Solaris component: XScreenSaver contains an unspecified vulnerability that allows for privilege escalation.
Microsoft Silverlight does not properly validate pointers during HTML object rendering, which allows remote attackers to execute code via a crafted Silverlight application.
Microsoft Input Method Editor (IME) Japanese is a keyboard with Japanese characters that can be enabled on Windows systems as it is included by default (with the default set as disabled). IME Japanese contains an unspecified vulnerability when IMJPDCT.EXE (IME for Japanese) is installed which allows attackers to bypass a sandbox and perform privilege escalation.
A privilege escalation vulnerability exists when the Windows Mount Manager component improperly processes symbolic links.
Use-after-free vulnerability in Adobe Flash Player and Adobe AIR allows attackers to execute code.
Unspecified vulnerability in the Java Runtime Environment (JRE) in Java SE component allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors.
Integer overflow vulnerability in Adobe Flash Player and AIR allows attackers to execute code.
Microsoft Silverlight mishandles negative offsets during decoding, which allows attackers to execute remote code or cause a denial-of-service (DoS).
Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).