Zhangjie

**Name of the Vulnerable Software and Affected Versions** Microsoft Office Graphics Component (affected versions not specified) **Description** The issue is related to a lack of protection for sensitive data in the Microsoft Office Graphics Component. Exploitation of this issue may allow an attacker to gain unauthorized access to protected information. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows (affected versions not specified) **Description** The issue is related to the disclosure of protected information in the Windows GDI interface. It allows an attacker to gain unauthorized access to sensitive information. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Office Graphics (affected versions not specified) **Description** The issue is related to incorrect code generation management in the Microsoft Office Graphics component. This can allow a remote attacker to execute arbitrary code. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Media Foundation Core (affected versions not specified) **Description** The issue is related to incorrect code generation management in the Windows Media Foundation Core component of Microsoft Windows operating systems. This can allow a remote attacker to execute arbitrary code on the system, affecting its operation. The estimated number of potentially affected devices and details about real-world incidents where this issue was exploited are not provided. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows GDI+ (affected versions not specified) Description: The issue exists due to insufficient input validation in the Windows Graphics Device Interface Plus (GDI+) component of Windows operating systems. This can allow an attacker to gain unauthorized access to protected information. The vulnerability enables attackers to obtain sensitive information and potentially affect the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Codecs Library (affected versions not specified) Description: The vulnerability in the Microsoft Windows Codecs Library is related to insufficient protection of internal data. It allows attackers to obtain sensitive information and potentially affect the system. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Office versions (affected versions not specified) Microsoft Office Web Apps Server versions (affected versions not specified) Microsoft Excel versions (affected versions not specified) Microsoft 365 Apps for Enterprise versions (affected versions not specified) Microsoft Office Online Server versions (affected versions not specified) **Description** The issue is related to insufficient protection of sensitive data in Microsoft products. It may allow an attacker to gain unauthorized access to protected information. An information disclosure vulnerability in Microsoft Excel can be exploited to affect the system. **Recommendations** For Microsoft Office, update to a version that includes the fix for this issue. For Microsoft Office Web Apps Server, apply the necessary configuration changes to mitigate the risk. For Microsoft Excel, consider restricting access to sensitive data until a patch is available. For Microsoft 365 Apps for Enterprise, update to a version that includes the fix for this issue. For Microsoft Office Online Server, apply the necessary security updates to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Microsoft Office (affected versions not specified) **Description** The issue is related to incorrect management of code generation when processing a COM object Graph in Microsoft Office and Microsoft Office Web Apps. This can be exploited by an attacker to execute arbitrary code using a specially crafted malicious file or a specially formed malicious web page. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Word (affected versions not specified) Microsoft Office (affected versions not specified) Microsoft Office Online Server (affected versions not specified) Microsoft Office Web Apps (affected versions not specified) Microsoft 365 Apps (affected versions not specified) Microsoft SharePoint Server (affected versions not specified) Microsoft SharePoint Enterprise Server (affected versions not specified) **Description** The issue is related to insufficient input validation in Microsoft Word and other Microsoft products. This allows remote attackers to execute arbitrary code. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft PowerPoint (affected versions not specified) **Description** The issue is related to insufficient input validation in Microsoft PowerPoint, which can be exploited to gain access to sensitive information, execute arbitrary code, or cause a denial of service. This can be achieved by remote attackers. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows GDI (affected versions not specified) **Description** The issue is related to an information disclosure vulnerability in the Windows GDI component, which improperly discloses the contents of its memory. This vulnerability can be exploited by a remote attacker to reveal protected information. The vulnerability is associated with shortcomings in the security mechanisms of the Windows GDI component. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Graphics Device Interface Plus (GDI+) (affected versions not specified) **Description** An information disclosure issue exists in the way Windows Graphics Device Interface Plus (GDI+) handles objects in memory. This allows an attacker to retrieve information from a targeted system. The vulnerability is related to errors in processing objects in memory, which can be exploited to disclose protected information. There is no information available about the estimated number of potentially affected devices or real-world incidents where this issue was exploited. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Excel (affected versions not specified) Microsoft Office (affected versions not specified) Office 365 (affected versions not specified) **Description** The issue is related to an information disclosure problem where Microsoft Excel improperly discloses the contents of its memory. This could allow an attacker to gain unauthorized access to protected information by using a specially crafted file. An attacker who exploits this issue could use the disclosed information to compromise the user's computer or data. **Recommendations** For Microsoft Excel, consider restricting access to sensitive data until a fix is available. For Microsoft Office, avoid using potentially vulnerable features in Microsoft Excel until the issue is resolved. For Office 365, restrict usage of Microsoft Excel to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows GDI (affected versions not specified) **Description** The issue is related to the Windows GDI component improperly disclosing the contents of its memory. This can allow an attacker to obtain sensitive information using a specially crafted application. The vulnerability is associated with errors in processing objects in memory. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows (affected versions not specified) **Description** The issue is related to insecure privilege management in the Windows Graphics component, allowing an attacker to gain unauthorized access to protected information using a specially crafted application. This is an elevation-of-privilege issue that can affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Jet Database Engine (affected versions not specified) **Description** The issue is related to a buffer overflow in memory, which can be exploited by using a specially crafted file, allowing an attacker to execute arbitrary code. This can affect the system and potentially lead to remote code execution. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** .NET Framework (affected versions not specified) **Description** A denial of service issue exists due to improper handling of objects in heap memory. This could allow a remote attacker to cause a denial of service against a .NET application. To exploit this issue, an attacker would have to log on to an affected system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Windows Jet Database Engine (affected versions not specified) **Description** The issue is caused by a buffer overflow in memory, allowing an attacker to execute arbitrary code using a specially crafted file. This can enable remote attackers to execute arbitrary code and affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Office Access Connectivity Engine (affected versions not specified) **Description** The issue is related to errors in handling objects in memory within the Microsoft Office Access Connectivity Engine. This can be exploited by a remote attacker to execute arbitrary code on a victim's system. The exploitation can occur when a victim opens a specially crafted file. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Internet Explorer (affected versions not specified) Microsoft Windows (affected versions not specified) **Description** A remote code execution issue exists due to errors in handling objects in memory by the VBScript engine. This could allow a remote attacker to execute arbitrary code using a specially crafted web page. The vulnerability could corrupt memory, enabling an attacker to gain the same user rights as the current user. If the current user has administrative rights, the attacker could take control of the affected system, install programs, view, change, or delete data, or create new accounts with full user rights. **Recommendations** For Internet Explorer, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Microsoft Windows, at the moment, there is no information about a newer version that contains a fix for this vulnerability.