Microsoft Windows Kernel-Mode Drivers Multiple Vulnerabilities

GDI Access Violation Vulnerability

A remote code execution vulnerability exists in the Windows kernel due to improper validation of input passed from user mode through the kernel component of GDI. The vulnerability could allow an attacker to run code in kernel-mode and then install programs; view, change, or delete data; or create new accounts with full administrative rights.

Keyboard Layout Use After Free Vulnerability

An elevation of privilege vulnerability exists due to the way that the Windows kernel-mode driver manages specific keyboard layouts. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full administrative rights.