Igor Soumenkov

**Name of the Vulnerable Software and Affected Versions** Windows Server 2008 Windows 7 Windows Server 2008 R2 **Description** The issue is caused by a buffer overflow in the memory of the Win32k component (Win32k.sys) in Windows operating systems. This can allow an attacker to execute arbitrary code using a specially crafted application. The vulnerability exists due to Windows improperly handling calls to Win32k.sys, which can lead to an elevation of privilege. **Recommendations** For Windows Server 2008, Windows 7, and Windows Server 2008 R2, apply the necessary patches or updates to fix the Win32k.sys component. As a temporary workaround, consider restricting access to the Win32k.sys component until a patch is available. Avoid using the affected Windows systems for sensitive operations until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Windows versions prior to the fixed version **Description** The issue is related to errors in handling objects in memory by the Windows kernel, which can allow an attacker to elevate their privileges and execute arbitrary code using a specially crafted application. This affects various Windows versions, including Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, and Windows 10 Servers. An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. **Recommendations** For all affected versions of Microsoft Windows, apply the necessary patch to fix the vulnerability. At the moment, there is no information about a newer version that contains a fix for this vulnerability.