Ruben

**Name of the Vulnerable Software and Affected Versions** JavaScript::Minifier::XS versions prior to 0.16 **Description** An issue exists where memory is leaked during every call to the `minify()` function. In the XS.xs component, the cleanup process only frees NodeSet structures and fails to free per-token contents buffers allocated in `JsSetNodeContents`. Additionally, `JsDiscardNode` unlinks nodes without freeing their contents. This results in unbounded memory growth for long-lived processes that perform repeated minification, such as server-side minifier endpoints or asset pipelines, potentially leading to a denial of service when available memory is exhausted. **Recommendations** Update JavaScript::Minifier::XS to version 0.16 or later.

**Name of the Vulnerable Software and Affected Versions** Fortinet FortiClient Host Security versions 3.0 MR5 Patch 3 and earlier **Description** The issue is related to the fortimon.sys device driver, which does not properly initialize its DeviceExtension. This allows local users to access kernel memory and execute arbitrary code via a crafted request. **Recommendations** For Fortinet FortiClient Host Security versions 3.0 MR5 Patch 3 and earlier, update to a version later than 3.0 MR5 Patch 3 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** SpeedFan version 4.33 **Description** The issue is related to a buffer checking problem in the Speedfan.sys driver. This can lead to a denial of service, causing the machine to crash, and potentially allow local users to gain privileges through unspecified vectors. **Recommendations** For SpeedFan version 4.33, consider disabling the Speedfan.sys driver as a temporary workaround to minimize the risk of exploitation. Restrict access to the IOCTL 0x9c402420 call to prevent potential attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.