Two vulnerabilities have been identified in Microsoft Windows, which could be exploited by attackers to compromise a vulnerable system.
The first issue is caused by an error in Windows Explorer that does not correctly free memory when saving Windows Search files, which could be exploited by attackers to execute arbitrary code by tricking a user into opening and saving a specially crafted saved-search file.
The second vulnerability is caused by an error in Windows Explorer that does not correctly interpret parameters when parsing the search-ms protocol, which could be exploited by attackers to execute arbitrary code by tricking a user into visiting a malicious web page.
