Описание
An elevation of privilege vulnerability exists in the way that Microsoft COM for Windows handles objects in memory. An attacker who successfully exploited the vulnerability could gain elevated privileges on a targeted system.
To exploit the vulnerability, a user would have to open a specially crafted file.
The security update addresses the vulnerability by correcting how Microsoft COM for Windows handles objects in memory.
Ссылки
- PatchVendor Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Одно из
EPSS
7.9 High
CVSS3
7.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
Связанные уязвимости
Microsoft COM for Windows Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in the way that Microsoft COM for Windows handles objects in memory, aka 'Microsoft COM for Windows Elevation of Privilege Vulnerability'.
Уязвимость компонента Microsoft COM операционных систем Windows, позволяющая нарушителю повысить привилегии
EPSS
7.9 High
CVSS3
7.8 High
CVSS3
6.8 Medium
CVSS2