Title

Microsoft Common Control Security Feature Bypass Vulnerability (Cat II impact)

Discussion

Microsoft has released a security bulletin addressing a security feature bypass vulnerability in Microsoft Windows common controls.To exploit these vulnerabilities, an attacker would host a website containing malicious content able to exploit this vulnerability. If successfully exploited, the attacker would use this ASLR bypass vulnerability in conjunction with another vulnerability, such as a remote code execution vulnerability that could take advantage of the ASLR bypass to run arbitrary code.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-50451

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.