René Freingruber

**Name of the Vulnerable Software and Affected Versions** NextCloud Desktop Client version 2.6.4 **Description** A memory corruption issue exists due to missing Address Space Layout Randomization (ASLR) and Data Execution Prevention (DEP) protections in the Windows version of the software, allowing memory corruption. **Recommendations** For NextCloud Desktop Client version 2.6.4, consider updating to a newer version that includes ASLR and DEP protections to prevent memory corruption.

**Name of the Vulnerable Software and Affected Versions** Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers **Description** The issue is related to the NTFS file system in Windows operating systems, which has inadequate access control checks. This can be exploited by an attacker using a specially crafted application to elevate their privileges. **Recommendations** For Windows 7, update to a newer version to mitigate the risk. For Windows Server 2012 R2, update to a newer version to mitigate the risk. For Windows RT 8.1, update to a newer version to mitigate the risk. For Windows Server 2008, update to a newer version to mitigate the risk. For Windows Server 2012, update to a newer version to mitigate the risk. For Windows 8.1, update to a newer version to mitigate the risk. For Windows Server 2016, update to a newer version to mitigate the risk. For Windows Server 2008 R2, update to a newer version to mitigate the risk. For Windows 10, update to a newer version to mitigate the risk. For Windows 10 Servers, update to a newer version to mitigate the risk.