Bryan Gonzalez

**Nome do software vulnerável e versões afetadas** Windows (versões afetadas não especificadas) **Descrição** O problema está relacionado ao uso de memória após ela ter sido liberada no componente Win32k dos sistemas operacionais Windows. Isso pode permitir que um invasor eleve seus privilégios. O número estimado de dispositivos potencialmente afetados em todo o mundo não foi especificado. Não há informações sobre incidentes reais em que essa vulnerabilidade tenha sido explorada. **Recomendações** No momento, não há informações sobre uma versão mais recente que contenha uma correção para essa vulnerabilidade.

**Name of the Vulnerable Software and Affected Versions** Windows Bluetooth Driver (affected versions not specified) **Description** The vulnerability is related to insufficient protection of service data in the Windows Bluetooth Driver, which can allow a remote attacker to gain unauthorized access to protected information. It enables attackers to obtain sensitive information and affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ImageMagick versions 7.1.0-49 **Description** The issue is related to resource management errors in the ImageMagick graphic editor. Exploitation of this issue may allow a remote attacker to cause a denial of service using the `profile` parameter. When ImageMagick parses a PNG image, for example, for resizing, the convert process could be left waiting for stdin input. **Recommendations** For ImageMagick versions 7.1.0-49, consider disabling the convert process for PNG images until a patch is available to prevent potential denial of service attacks. Restrict access to the `profile` parameter to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ImageMagick version 7.1.0-49 **Description** The issue is related to errors in processing input data, which can allow a remote attacker to access protected information using the `profile` parameter. When ImageMagick parses a PNG image, the resulting image could have embedded the content of an arbitrary file if the magick binary has permissions to read it. **Recommendations** For ImageMagick version 7.1.0-49, consider disabling the processing of external PNG images until a patch is available. Restrict access to the `profile` parameter to minimize the risk of exploitation. Avoid using the `profile` parameter in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.