Linhlhq

**Name of the Vulnerable Software and Affected Versions** Windows Hyper-V (affected versions not specified) **Description** The issue is related to an elevation-of-privilege vulnerability in the Windows Hyper-V system, which is caused by flaws in the authorization procedure. This vulnerability can be exploited to allow an attacker to elevate their privileges. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Windows (affected versions not specified) **Description** The issue is related to an elevation-of-privilege vulnerability in the Storage Spaces Controller, which is associated with insufficient access restrictions. This vulnerability can be exploited to allow an attacker to elevate their privileges. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Office versions (affected versions not specified) Microsoft Word versions (affected versions not specified) Microsoft 365 Apps for Enterprise versions (affected versions not specified) **Description** The issue is related to insufficient input validation in Microsoft Office, Microsoft Word, and Microsoft 365 Apps for Enterprise, allowing an attacker to execute arbitrary code. This can be exploited by remote attackers, potentially affecting the system. **Recommendations** For Microsoft Office, update to a version that includes the fix for this issue. For Microsoft Word, consider disabling any features that rely on external input until a patch is available. For Microsoft 365 Apps for Enterprise, restrict access to any modules that may be vulnerable to remote code execution until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** HEVC Video Extensions (affected versions not specified) **Description** The issue is related to incorrect code generation management in the HEVC Video Extensions codec. Exploitation of this issue may allow an attacker to execute arbitrary code. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** HEVC Video Extensions (affected versions not specified) **Description** The issue is related to incorrect code generation management in the application. It may allow a remote attacker to execute arbitrary code. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: A heap-based buffer overflow issue exists in GNU LibreDWG. The problem is related to the bit search sentinel function in the bits.c file. Recommendations: For GNU LibreDWG version 0.10, consider updating to a newer version that contains a fix for this issue, if available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: A heap-based buffer overflow issue exists in the read 2004 section appinfo function, located in the decode.c file. This issue can be exploited via the read 2004 section appinfo function. Recommendations: For GNU LibreDWG version 0.10, consider applying a patch or fix to address the heap-based buffer overflow issue in the read 2004 section appinfo function. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: A heap-based buffer overflow issue exists via the `bit read B` function in the `bits.c` file. This could potentially allow for exploitation. Recommendations: For GNU LibreDWG version 0.10, consider restricting access to the `bit read B` function in the `bits.c` file until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: A null pointer dereference issue exists in GNU LibreDWG. This issue is related to the get bmp function in the dwgbmp.c file. Recommendations: For GNU LibreDWG version 0.10, consider avoiding the use of the get bmp function until a patch is available. As a temporary workaround, review the code in dwgbmp.c to identify and mitigate potential null pointer dereferences. At the moment, there is no information about a newer version that contains a fix for this issue.

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10.2641 Description: A heap-based buffer overflow issue exists. The problem is located in the `escape.c` file at line 51, specifically via `htmlescape`. Recommendations: For GNU LibreDWG version 0.10.2641, consider restricting access to the `htmlescape` function in `escape.c` until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: A heap-based buffer overflow issue exists in the software. The problem is located in the bit calc CRC function in the bits.c file. Recommendations: For GNU LibreDWG version 0.10, at the moment, there is no information about a newer version that contains a fix for this issue.

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: A heap-based buffer overflow issue exists, which can be triggered via the `read 2004 compressed section` function in the `decode.c` file. Recommendations: For GNU LibreDWG version 0.10, consider applying a patch or fix that addresses the heap-based buffer overflow in the `read 2004 compressed section` function. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: A heap-based buffer overflow issue exists due to a problem in the `read 2004 section handles` function located in `decode.c` at line 2637. This could potentially lead to exploitation. Recommendations: For GNU LibreDWG version 0.10, consider restricting access to the `read 2004 section handles` function in `decode.c` until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: An issue in GNU LibreDWG leads to a memory leak when crafted input is processed by the dwg decode eed function in the decode.c file. Recommendations: For GNU LibreDWG version 0.10, at the moment, there is no information about a newer version that contains a fix for this issue.

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: A null pointer dereference issue exists in the software. The issue is related to the `read 2004 compressed section` function in the `decode.c` file. Recommendations: For GNU LibreDWG version 0.10, consider avoiding the use of the `read 2004 compressed section` function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10.2641 Description: A heap-based buffer overflow issue exists in GNU LibreDWG. The issue is related to the htmlescape function in the escape.c file. Recommendations: For GNU LibreDWG version 0.10.2641, at the moment, there is no information about a newer version that contains a fix for this issue.

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10.2641 Description: A null pointer dereference issue exists, which causes a denial of service, resulting in an application crash. The issue is located in the dwg2SVG.c file. Recommendations: For GNU LibreDWG version 0.10.2641, consider avoiding the use of the affected function or module until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10 Description: A heap-based buffer overflow issue exists, which can be triggered via the `read 2004 compressed section` function in the `decode.c` file. Recommendations: For GNU LibreDWG version 0.10, consider applying a patch or fix to address the heap-based buffer overflow issue in the `read 2004 compressed section` function. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10.2641 Description: A null pointer dereference issue exists, which causes a denial of service, resulting in an application crash. The issue is related to the `htmlescape` function in the `escape.c` file. Recommendations: For GNU LibreDWG version 0.10.2641, consider applying a patch to fix the null pointer dereference issue in the `htmlescape` function to prevent application crashes. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10.2641 Description: A heap-based buffer overflow issue exists in the software. The issue is located in the ../../programs/escape.c file at line 97, and is related to the htmlwescape function. Recommendations: For GNU LibreDWG version 0.10.2641, consider applying a patch or fix to address the heap-based buffer overflow issue in the htmlwescape function, if available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.