Benoit Sevens

The issue is related to improper input validation in the Windows Common Log File System Driver, allowing an authorized attacker to elevate privileges locally. This vulnerability has been exploited in real-world attacks, with cases reported in companies in the USA, Venezuela, Spain, and Saudi Arabia. The estimated number of potentially affected devices is not specified.

A vulnerability in the Linux kernel's USB Video Class driver can lead to out-of-bounds writes, allowing an attacker to escalate privileges or execute arbitrary code. The vulnerability is caused by incorrect parsing of an undefined frame type in the `uvc parse format` function. This can be exploited by an attacker who can influence the format of video streams captured by a system's USB video device.

The issue is related to an elevation of privilege vulnerability in the Windows DWM Core Library. This vulnerability allows attackers to affect the system. It has been linked to cyberattacks involving QakBot, a notorious banking trojan. The vulnerability is being actively exploited by QakBot and other malware. Researchers have identified a new zero-day vulnerability in Windows, designated as this issue, and it is being used by multiple attackers.