Andrew Ruddick

**Name of the Vulnerable Software and Affected Versions** Windows Sensor Data Service (affected versions not specified) **Description** An untrusted pointer dereference in the Windows Sensor Data Service allows an authorized attacker to elevate privileges locally, which can affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows (affected versions not specified) Description: The issue is related to the implementation of the SMB protocol in Windows operating systems, specifically involving the use of memory after it has been freed. This can be exploited by a remote attacker to cause a denial of service. A pre-authentication remote denial of service vulnerability was found in the Windows kernel SMB stack. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft SQL Server (affected versions not specified) **Description** The issue is related to a buffer overflow in memory, allowing a remote attacker to potentially elevate their privileges. It is associated with the OLE DB driver for SQL Server on Windows operating systems. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft SQL Server (affected versions not specified) **Description** The issue is related to a buffer overflow in the OLE DB driver for SQL Server on Windows operating systems. This can allow a remote attacker to disclose protected information or cause a denial of service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft SQL Server (affected versions not specified) **Description** The issue is related to a component of Microsoft SQL Server, specifically the Native Scoring system, which has a problem with using memory after it has been freed. This can be exploited by a remote attacker to execute arbitrary code. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft SQL Server (affected versions not specified) **Description** The vulnerability in the Native Scoring component of Microsoft SQL Server is related to a buffer overflow in dynamic memory. Exploitation of this issue may allow a remote attacker to execute arbitrary code. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft SQL Server (affected versions not specified) **Description** The vulnerability in the Native Scoring component of Microsoft SQL Server is related to a buffer overflow in dynamic memory. Exploitation of this issue may allow a remote attacker to execute arbitrary code. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft SQL Server (affected versions not specified) **Description** The issue is related to a component of Microsoft SQL Server, specifically the Native Scoring system, which is vulnerable due to a dereference of an untrusted pointer. This could allow a remote attacker to execute arbitrary code. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft SQL Server (affected versions not specified) **Description** The vulnerability in the Native Scoring component of Microsoft SQL Server is related to a buffer overflow in memory, allowing a remote attacker to execute arbitrary code. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft SQL Server (affected versions not specified) **Description** The issue is related to errors in numerical truncation in the Microsoft SQL Server system, which can allow a remote attacker to gain unauthorized access to protected information or cause a denial of service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft SQL Server (affected versions not specified) **Description** The issue is related to a component of Microsoft SQL Server, specifically the Native Scoring system, and involves a problem with dereferencing an untrusted pointer. This could allow a remote attacker to execute arbitrary code. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Oracle Outside In Technology versions 8.5.6 through 8.5.7 Description: The issue is related to insufficient input validation in the Outside In Core component of Oracle Outside In Technology, allowing a low-privileged attacker with logon to the infrastructure to compromise the technology. Successful attacks can result in unauthorized update, insert, or delete access to some data, as well as unauthorized read access to a subset of data and the ability to cause a partial denial of service. Recommendations: For versions 8.5.6 and 8.5.7, update to a version that includes the fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Oracle Outside In Technology versions 8.5.6 through 8.5.7 Description: The issue is related to insufficient input validation in the Outside In Core component of Oracle Outside In Technology, allowing a low-privileged attacker with logon to the infrastructure to compromise the technology. Successful attacks can result in unauthorized update, insert, or delete access to some data, as well as unauthorized read access to a subset of data and the ability to cause a partial denial of service. Recommendations: For versions 8.5.6 and 8.5.7, update to a version that includes the fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Hyper-V (affected versions not specified) **Description** The issue is related to insufficient protection of system data in the Hyper-V hardware virtualization system for Windows operating systems. Exploitation of this issue may allow an attacker to gain unauthorized access to protected information. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Exchange Server (affected versions not specified) **Description** The issue is related to errors in the representation of information by the user interface, allowing a remote attacker to perform a spoofing attack. This can enable an attacker to influence the system. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Resilient File System (ReFS) (affected versions not specified) **Description** The issue is related to insufficient input validation in the Windows Resilient File System (ReFS), which can be exploited by setting up a specially crafted VHD file. This allows an attacker to execute arbitrary code, affecting the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft SQL Server (affected versions not specified) **Description** The issue exists due to insufficient input validation in the database management system, allowing a remote attacker to execute arbitrary code. This can affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft SQL Server (affected versions not specified) **Description** The issue is related to insufficient input validation in the database management system, which can be exploited by a remote attacker to execute arbitrary code. This can affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft SQL Server Integration Service (VS extension) (affected versions not specified) **Description** The issue is related to insufficient input validation in the SQL Server Integration Services (SSIS) software, which can be exploited to execute arbitrary code using a specially crafted file. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Installer (affected versions not specified) **Description** The issue is related to an elevation-of-privilege vulnerability in the Windows Installer service, which is caused by insufficient access restrictions. This vulnerability can be exploited by an attacker to bypass security restrictions and elevate their privileges. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.