Yongchuank

**Nome do software vulnerável e versões afetadas** Microsoft Windows (versões afetadas não especificadas) **Descrição** O problema está relacionado ao serviço de Rastreamento de Eventos do Windows e é causado por um controle de acesso inadequado. Isso permite que um invasor eleve seus privilégios. Não há informações disponíveis sobre o número estimado de dispositivos potencialmente afetados em todo o mundo ou sobre incidentes reais em que essa vulnerabilidade tenha sido explorada. **Recomendações** No momento, não há informações sobre uma versão mais recente que contenha uma correção para essa vulnerabilidade.

**Name of the Vulnerable Software and Affected Versions** Microsoft Windows versions 8.1, 10 (Gold, 1511, 1607, 1703), Windows Server 2012 (Gold and R2), Windows Server 2016, Windows RT 8.1 **Description** The issue arises from the Windows Uniscribe component's failure to properly handle objects in memory, leading to a remote code execution vulnerability. This can be exploited by remote attackers to execute arbitrary code on the system. The vulnerability is caused by an out-of-bounds operation in memory, resulting from incorrect handling of objects. **Recommendations** For Microsoft Windows versions 8.1, 10 (Gold, 1511, 1607, 1703), Windows Server 2012 (Gold and R2), Windows Server 2016, and Windows RT 8.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Office (affected versions not specified) **Description** The issue is related to the way Microsoft Office handles objects in memory, allowing for remote code execution. An attacker could exploit this to run arbitrary code in the context of the current user. If the user has administrative rights, the attacker could take control of the system, install programs, view, change or delete data, or create new accounts with full user rights. The exploitation requires a user to open a specially crafted file with an affected version of Microsoft Office software. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.