Guang Gong

**Name of the Vulnerable Software and Affected Versions** Microsoft 365 Apps for Enterprise versions 16.0.1 through 16.0.1 **Description** A use-after-free issue in Microsoft Office allows an unauthorized attacker to execute arbitrary code locally or remotely. This occurs when a user is tricked into opening a malicious document, which triggers memory corruption during processing. **Recommendations** Update Microsoft 365 Apps for Enterprise to a version newer than 16.0.1.

**Name of the Vulnerable Software and Affected Versions** Github Copilot (affected versions not specified) **Description** A command injection issue exists in Github Copilot. This allows a remote, unauthorized attacker to execute code over a network. The issue is related to a failure to sanitize data at the management level. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Microsoft Office (affected versions not specified) Description: A heap-based buffer overflow exists in Microsoft Office, potentially allowing an unauthorized attacker to execute code locally. The vulnerability may allow remote attackers to execute arbitrary code and affect the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Microsoft Office Visio (affected versions not specified) Description: A heap-based buffer overflow exists in Microsoft Office Visio that could allow an unauthorized attacker to execute code locally. The issue requires user interaction and involves crafted files. Recommendations: Apply the September 2025 Patch Tuesday update.

**Name of the Vulnerable Software and Affected Versions:** Microsoft Office (affected versions not specified) **Description:** A use-after-free issue exists in Microsoft Office, potentially allowing an unauthorized attacker to execute code locally. The vulnerability may allow remote attackers to execute arbitrary code and affect the system. Several use-after-free bugs were identified within Microsoft Office and Word, where malicious code execution is possible upon opening a compromised document. It is reported that some of these vulnerabilities are being exploited in real-world attacks. **Recommendations:** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Office PowerPoint (affected versions not specified) Microsoft 365 Apps for Enterprise (affected versions not specified) Microsoft Office (affected versions not specified) Microsoft Office Long Term Servicing Channel (affected versions not specified) **Description** A heap-based buffer overflow exists in Microsoft Office PowerPoint. This issue allows an unauthorized attacker to execute code locally and potentially affect the system. The vulnerability enables remote attackers to execute arbitrary code. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** NVIDIA Triton Inference Server (affected versions not specified) **Description** The issue is related to an integer overflow or wraparound error in the model loading API. This can be triggered by loading a model with an extra-large file size, potentially leading to a denial of service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 14.1 iOS versions prior to 17.1 iPadOS versions prior to 17.1 iOS versions prior to 16.7.2 iPadOS versions prior to 16.7.2 macOS Ventura versions prior to 13.6.1 **Description** The issue is related to improved memory handling, which may allow an app to execute arbitrary code with kernel privileges. It is also described as a buffer overflow vulnerability in the Pro Res component of iOS, macOS, and iPadOS operating systems. **Recommendations** For macOS versions prior to 14.1, update to macOS Sonoma 14.1. For iOS versions prior to 17.1, update to iOS 17.1. For iPadOS versions prior to 17.1, update to iPadOS 17.1. For iOS versions prior to 16.7.2, update to iOS 16.7.2. For iPadOS versions prior to 16.7.2, update to iPadOS 16.7.2. For macOS Ventura versions prior to 13.6.1, update to macOS Ventura 13.6.1.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 14.1 tvOS versions prior to 17.1 macOS Monterey versions prior to 12.7.1 iOS versions prior to 16.7.2 iPadOS versions prior to 16.7.2 iOS versions prior to 17.1 iPadOS versions prior to 17.1 macOS Ventura versions prior to 13.6.1 **Description** The issue was addressed with improved bounds checks. An app may be able to execute arbitrary code with kernel privileges. **Recommendations** For macOS versions prior to 14.1, update to macOS Sonoma 14.1. For tvOS versions prior to 17.1, update to tvOS 17.1. For macOS Monterey versions prior to 12.7.1, update to macOS Monterey 12.7.1. For iOS versions prior to 16.7.2, update to iOS 16.7.2. For iPadOS versions prior to 16.7.2, update to iPadOS 16.7.2. For iOS versions prior to 17.1, update to iOS 17.1. For iPadOS versions prior to 17.1, update to iPadOS 17.1. For macOS Ventura versions prior to 13.6.1, update to macOS Ventura 13.6.1.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 119.0.6045.199 Microsoft Edge versions (affected versions not specified) **Description** The issue is related to a use after free vulnerability in the Mojo IPC library, which can be exploited by a remote attacker to potentially impact the confidentiality, integrity, and availability of protected information. This can be achieved via a crafted HTML page, allowing for heap corruption. **Recommendations** For Google Chrome versions prior to 119.0.6045.199, update to version 119.0.6045.199 or later to resolve the issue. For Microsoft Edge, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 113.0.5672.126 **Description** The issue is related to a use after free in Navigation, which can be exploited by a remote attacker to potentially cause heap corruption via a crafted HTML page. This can lead to memory corruption, potentially resulting in arbitrary code execution, denial of service, or data corruption, and may also be used to escape the browser sandbox. **Recommendations** For Google Chrome versions prior to 113.0.5672.126, update to version 113.0.5672.126 or later to resolve the issue. As a temporary workaround, consider avoiding the use of crafted HTML pages that may trigger the heap corruption. Restrict access to potentially vulnerable Navigation functions to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 16.4 Apple iPadOS versions prior to 16.4 Apple tvOS versions prior to 16.4 **Description** An out-of-bounds read issue was addressed with improved bounds checking. Processing a maliciously crafted Bluetooth packet may result in disclosure of process memory. **Recommendations** For Apple iOS versions prior to 16.4, update to iOS 16.4 or later. For Apple iPadOS versions prior to 16.4, update to iPadOS 16.4 or later. For Apple tvOS versions prior to 16.4, update to tvOS 16.4 or later.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 112.0.5615.137 **Description** The issue is related to a heap buffer overflow in the SQLite component, which could allow a remote attacker to exploit heap corruption via a crafted HTML page. This may potentially lead to arbitrary code execution. The severity of this issue is classified as Medium by Chromium. **Recommendations** For Google Chrome versions prior to 112.0.5615.137, update to version 112.0.5615.137 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 108.0.5359.71 **Description** The issue allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This is due to a use after free in Camera Capture. **Recommendations** For versions prior to 108.0.5359.71, update to version 108.0.5359.71 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Google Chrome on Chrome OS versions prior to 107.0.5304.62 **Description** The issue is related to a use after free vulnerability in the Feedback service on Chrome OS in Google Chrome. This could allow a remote attacker to impact the confidentiality, integrity, and availability of protected information by exploiting heap corruption via specific UI interaction, potentially after convincing a user to install a malicious extension. **Recommendations** For Google Chrome on Chrome OS versions prior to 107.0.5304.62, update to version 107.0.5304.62 or later to resolve the issue. As a temporary workaround, consider restricting the installation of extensions to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Snapdragon Connectivity (affected versions not specified) Snapdragon Industrial IOT (affected versions not specified) Snapdragon Mobile (affected versions not specified) **Description** The issue is related to a use after free in the synx driver, which occurs during multiple invocations of synx release calls while performing other functions. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 105.0.5195.52 Microsoft Edge (affected versions not specified) **Description** The issue is related to a use after free vulnerability in the password manager of Google Chrome and Microsoft Edge browsers. This vulnerability can be exploited by a remote attacker who convinces a user to perform specific UI interactions, potentially allowing the attacker to disclose protected information via a crafted HTML page. **Recommendations** For Google Chrome versions prior to 105.0.5195.52, update to version 105.0.5195.52 or later to resolve the issue. For Microsoft Edge, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 104.0.5112.79 **Description** The issue is related to a use after free in the WebUI of Google Chrome on Chrome OS, which could allow a remote attacker to potentially exploit heap corruption via specific UI interactions if the user is convinced to engage in specific actions. This could lead to the disclosure of protected information. **Recommendations** For versions prior to 104.0.5112.79, update to version 104.0.5112.79 or later to resolve the issue. As a temporary workaround, consider restricting user interactions with the WebUI to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 104.0.5112.79 **Description** The issue is related to a use after free in the Safe Browsing feature, which could allow a remote attacker to exploit heap corruption via a crafted HTML page. This may enable the attacker to execute arbitrary code. The estimated number of potentially affected devices is not specified. **Recommendations** For Google Chrome versions prior to 104.0.5112.79, update to version 104.0.5112.79 or later to resolve the issue. As a temporary workaround, consider restricting access to potentially malicious websites to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 104.0.5112.101 **Description** The issue is related to a use after free in the Chrome OS Shell, which could allow a remote attacker to exploit heap corruption via specific UI interactions if a user is convinced to participate in these interactions. This could potentially lead to the disclosure of protected information using a specially crafted web page. **Recommendations** For versions prior to 104.0.5112.101, update to version 104.0.5112.101 or later to resolve the issue. As a temporary workaround, consider restricting interactions with the Chrome OS Shell to minimize the risk of exploitation. Avoid engaging in specific UI interactions that could potentially trigger the heap corruption until the update is applied.