Peleg Hadar

**Name of the Vulnerable Software and Affected Versions** Windows Hyper-V (affected versions not specified) **Description** The issue is related to incorrect code generation management in the Hyper-V component of the Windows operating system. It allows a remote attacker to execute arbitrary code. The problem can be exploited for remote code execution or to cause a denial-of-service state. The vulnerability affects the Hyper-V virtual network switch driver (vmswitch.sys). **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: ASUS BMC firmware (affected versions not specified) Description: The issue arises from the Radius configuration function in the firmware's Web management page, which fails to verify the string length entered by users. This oversight results in a buffer overflow, allowing remote attackers to exploit the leakage and abnormally terminate the Web service after obtaining privileged permission. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Windows versions prior to the fixed version **Description** A spoofing vulnerability exists when Windows incorrectly validates file signatures, allowing an attacker to bypass security features and load improperly signed files. In an attack scenario, an attacker could bypass security features intended to prevent improperly signed files from being loaded. The update addresses the vulnerability by correcting how Windows validates file signatures. This issue has been exploited in real-world attacks, with attackers using polyglot files that combine multiple formats to evade detection. These files can be executed as MSI in Windows and as JAR files by the Java runtime environment, allowing them to hide malicious code and bypass antivirus checks. **Recommendations** For Microsoft Windows versions prior to the fixed version, update to the latest version to address the vulnerability by correcting how Windows validates file signatures. As a temporary workaround, consider restricting the use of vulnerable components, such as disabling the execution of polyglot files, until a patch is available. Avoid using files that combine multiple formats, such as MSI and JAR, to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Atlassian Jira versions prior to 8.5.2 **Description** The issue allows local attackers with permission to write a dll file to a directory in the global path environmental variable to inject code into Jira via a DLL hijacking vulnerability. **Recommendations** For versions prior to 8.5.2, update to version 8.5.2 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Confluence versions prior to 7.0.5 Confluence versions 7.1.0 through 7.1.0 **Description** The issue allows local system attackers with permission to write a DLL file in a directory in the global path environmental variable to inject code and escalate their privileges via a DLL hijacking vulnerability. This occurs when using Tomcat in Confluence on the Microsoft Windows operating system. **Recommendations** For Confluence versions prior to 7.0.5, update to version 7.0.5 or later. For Confluence versions 7.1.0, update to version 7.1.1 or later.

**Name of the Vulnerable Software and Affected Versions** Kaspersky Secure Connection versions prior to 2020 patch E Kaspersky Internet Security versions prior to 2020 patch E Kaspersky Total Security versions prior to 2020 patch E Kaspersky Security Cloud versions prior to 2020 patch E **Description** The issue is related to insufficient access control in the ksde.exe executable file of Kaspersky security products. Exploitation of this issue may allow an attacker to execute arbitrary code using a specially crafted DLL file. This can be achieved by a local user with administrator rights, and it does not involve privilege escalation. There is also a possibility of bypassing whitelisting in some security products. **Recommendations** For Kaspersky Secure Connection versions prior to 2020 patch E, update to version 2020 patch E or later. For Kaspersky Internet Security versions prior to 2020 patch E, update to version 2020 patch E or later. For Kaspersky Total Security versions prior to 2020 patch E, update to version 2020 patch E or later. For Kaspersky Security Cloud versions prior to 2020 patch E, update to version 2020 patch E or later. As a temporary workaround, consider restricting access to the `ksde.exe` executable file until a patch is available.

**Name of the Vulnerable Software and Affected Versions** TeamViewer versions prior to 11.0.214397 TeamViewer versions prior to 12.0.214399 TeamViewer versions prior to 13.2.36216 TeamViewer versions prior to 14.7.1965 **Description** A DLL side loading issue in the Windows Service of TeamViewer could allow an attacker to execute code on a target system via a service restart, provided the DLL was previously installed with administrative privileges. The attacker must be able to create a new file in the TeamViewer application directory, which is restricted by default due to directory permissions. **Recommendations** For versions up to 11.0.133222, update to version 11.0.214397 or later. For version 12.0.181268, update to version 12.0.214399 or later. For version 13.2.36215, update to version 13.2.36216 or later. For version 14.6.4835, update to version 14.7.1965 or later.

**Name of the Vulnerable Software and Affected Versions** HP Touchpoint Analytics versions prior to 4.1.4.2827 **Description** A potential security issue has been identified that may allow a local attacker with administrative privileges to execute arbitrary code via an HP Touchpoint Analytics system service. The issue is related to insufficient input validation, which can be exploited by an attacker to execute malicious code using DLL files. This can lead to a privilege escalation. **Recommendations** For versions prior to 4.1.4.2827, update to version 4.1.4.2827 or later to resolve the issue. As a temporary workaround, consider restricting access to the HP Touchpoint Analytics system service to minimize the risk of exploitation. Additionally, avoid using malicious DLL files in the affected system.

**Name of the Vulnerable Software and Affected Versions** Forcepoint VPN Client for Windows versions lower than 6.6.1 **Description** The issue allows for local privilege escalation to the SYSTEM user due to an unquoted search path vulnerability. By default, only local administrators can write executables to the vulnerable directories. **Recommendations** For Forcepoint VPN Client for Windows versions lower than 6.6.1, update to version 6.6.1 or later to resolve the issue.