(0Day) Microsoft Windows user32 Cursor Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Microsoft Windows user32 Cursor Parsing Out-Of-Bounds Read Information Disclosure Vulnerability allows remote attackers to disclose sensitive information. User interaction is required to exploit the vulnerability by visiting a malicious page or opening a malicious file. The flaw exists within the parsing of cursor files in the user32 library due to lack of proper validation of user-supplied data, resulting in a read past the end of an allocated buffer, which can allow attackers to execute code in the context of the current process