Multiple vulnerabilities have been reported in Microsoft Windows, which can be exploited by malicious, local users to gain escalated privileges and by malicious people to compromise a user's system.

1) A use-after-free error exists within win32k.sys when handling certain objects in memory.

2) Another use-after-free error exists within win32k.sys when handling certain objects in memory.

3) An error exists within the kernel when parsing TrueType fonts and can be exploited via a specially crafted font file.

Successful exploitation of this vulnerability may allow execution of arbitrary code.

Solution
Apply updates.
Further details available to Secunia VIM customers

Provided and/or discovered by
1) Reported by the vendor
2) Matthew Jurczyk, Google
3) Eetu Luodemaa and Joni Vahamaki, Documill via Chromium Security Rewards Program

Changelog
Further details available to Secunia VIM customers

Original Advisory
Microsoft (KB2761226):
http://technet.microsoft.com/en-us/security/bulletin/ms12-075

Matthew Jurczyk:
http://j00ru.vexillium.org/?p=1479

Deep Links
Links available to Secunia VIM customers