Code execution via undisclosed integer underflow

Integer underflow in Microsoft Visual Studio allows local users to execute arbitrary code through locally supplied, crafted input. Microsoft identifies the weakness as an integer underflow but has not disclosed the affected parser, function, data format, or incorrect arithmetic operation. Exploitation requires low-privilege local access and grants arbitrary code execution in the affected user's context, with no network-only attack path established.