Iván Arce

**Name of the Vulnerable Software and Affected Versions** Microsoft Surface (affected versions not specified) **Description** The issue concerns a security feature bypass. No specific details about technical exploitation or affected devices are provided. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Apache Superset versions prior to 4.1.0 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in SQL commands. Specifically, certain engine-specific functions are not checked, allowing attackers to bypass SQL authorization. The affected functions include `query to xml and xmlschema`, `table to xml`, and `table to xml and xmlschema`. This vulnerability may allow a remote attacker to execute arbitrary SQL code. Recommendations: For versions prior to 4.1.0, upgrade to version 4.1.0 to fix the issue. Alternatively, add the Postgres functions `query to xml and xmlschema`, `table to xml`, and `table to xml and xmlschema` to the config set `DISALLOWED SQL FUNCTIONS` as a temporary workaround.

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V (affected versions not specified) Description: The issue is related to insufficient input validation in the Windows Hyper-V system, allowing a remote attacker to bypass existing security restrictions. This could potentially lead to system compromise. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Apache NimBLE versions through 1.6.0 **Description** A specially crafted GATT operation can cause an infinite loop in the GATT server, leading to a denial of service in the Bluetooth stack or device. **Recommendations** For Apache NimBLE versions through 1.6.0, upgrade to version 1.7.0 to fix the issue. As a temporary workaround, consider restricting the use of the GATT operation to minimize the risk of exploitation.