Winslow1984

A vulnerability was determined in ieungSoft Ultra RAMDisk Pro 1.82. This issue affects some unknown processing in the library URDSCSI.sys of the component Kernel Driver. This manipulation causes improper privilege management. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

**Name of the Vulnerable Software and Affected Versions** DeepCool DisplayService version 1.2.12 **Description** Improper access controls exist in the processing of the file `C:DeepCoolresourcesservicex64DeepCoolDisplayService.exe`. This issue allows a local attacker to perform manipulations that result in unauthorized access. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** StableBit Scanner version 2.6.13.4088 **Description** A weakness exists in the `ScannerService` component, specifically within the file `C:Program Files (x86)StableBitScannerServiceScanner.Service.exe`. This issue allows for manipulation that leads to permission issues and is restricted to local execution. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** StableBit DrivePool version 2.3.13.1687 **Description** A security issue exists within the `DrivePoolService` component, specifically affecting the `DrivePool.Service.exe` file. A local attacker can manipulate the software to cause permission issues. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** PowerISO version 9.3.0.0 **Description** An issue exists in the Kernel Driver component within the library `C:WindowsSystem32driversscdemu.sys`. This flaw allows for improper privilege management, which can be exploited by an attacker with local access to the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** QILING Disk Master version 6.0.0.0 **Description** An issue exists in the Kernel Driver component within the `diskbckp.sys` library. An unknown function in this library allows for improper access controls, which can be exploited by a local attacker. **Recommendations** Upgrade QILING Disk Master version 6.0.0.0 to a newer version.

**Name of the Vulnerable Software and Affected Versions** MiniTool Partition Wizard versions prior to 13.9 **Description** An issue exists in the Signed Kernel Driver component within the `pwdrvio.sys` library. A weakness in an unknown function leads to improper access controls, which can be exploited by a local attacker. **Recommendations** Upgrade to version 13.9.

**Name of the Vulnerable Software and Affected Versions** IM-Magic Partition Resizer versions prior to 7.9.0 **Description** Improper access controls in the Kernel Driver component, specifically within the `MDA NTDRV.sys` library, allow for local privilege escalation. This issue occurs when a local attacker manipulates an unknown function within the library to bypass security restrictions. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** AOMEI Partition Assistant versions prior to 10.10.2 **Description** Improper access controls exist within the Kernel Driver component, specifically affecting unknown code in the `ampa10.sys` library. This issue allows a local attacker to manipulate the system to bypass access restrictions. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** AOMEI Dynamic Disk Manager versions prior to 10.10.2 **Description** An issue exists in the Kernel Driver component within the `ddmdrv.sys` library. Improper access controls can be triggered through specific manipulations, allowing a local attacker to gain unauthorized access. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** AOMEI Backupper versions prior to 8.3.0 **Description** An issue exists in the Kernel Driver component within the `amwrtdrv.sys` library. A local attacker can perform a manipulation of an unknown function to cause improper access controls. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** EaseUS Partition Master versions prior to 14.6 **Description** An issue exists in the Kernel Driver component within the `epmntdrv.sys` library. A local attacker can manipulate an unknown function in this library to cause improper access controls. **Recommendations** Upgrade the affected component to the latest version.

**Name of the Vulnerable Software and Affected Versions** EaseUS Partition Master versions prior to 14.6 **Description** A security flaw exists in the Kernel Driver component within the `EUEDKEPM.sys` library. An unknown function in this library allows for improper access controls, which can be exploited by a local attacker. **Recommendations** Upgrade to the latest version of the software to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Ezbsystems UltraISO Premium Edition versions prior to 9.77 **Description** Improper access controls exist within the Kernel Driver component, specifically affecting the `bootpt64.sys` library. This issue allows for unauthorized access when manipulated by a user with local access to the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** DVDFab Virtual Drive version 2.0.0.5 **Description** Improper privilege management exists within the Signed Kernel Driver component, specifically affecting a function in the `dvdfabio.sys` library. This issue allows a local attacker to manipulate the system to gain unauthorized privileges. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: AppHouseKitchen AlDente Charge Limiter versions up to 1.29 Description: A critical issue has been found in AppHouseKitchen AlDente Charge Limiter, affecting the `shouldAcceptNewConnection` function of the `com.apphousekitchen.aldente-pro.helper` file in the XPC Service component. This leads to improper authorization, allowing an attack to be launched on the local host. Recommendations: For AppHouseKitchen AlDente Charge Limiter versions up to 1.29, upgrade to version 1.30 to address this issue. As a temporary workaround, consider disabling the `shouldAcceptNewConnection` function until the update is applied. Restrict access to the XPC Service component to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** exelban stats versions up to 2.11.21 **Description** A critical issue has been found in the `shouldAcceptNewConnection` function of the XPC Service component, leading to command injection. This issue can be exploited locally. **Recommendations** For versions up to 2.11.21, upgrade to version 2.11.22 to address this issue. As a temporary workaround, consider disabling the `shouldAcceptNewConnection` function until a patch is available.

**Name of the Vulnerable Software and Affected Versions** X1a0He Adobe Downloader version 1.3.1 and earlier **Description** A critical vulnerability was found in the X1a0He Adobe Downloader, affecting the `shouldAcceptNewConnection` function of the `com.x1a0he.macOS.Adobe-Downloader.helper` file in the XPC Service component. This leads to improper privilege management. The exploit has been disclosed to the public and may be used, requiring a local approach to attack. It is noted that this product is not affiliated with the company Adobe. **Recommendations** For X1a0He Adobe Downloader version 1.3.1 and earlier, as a temporary workaround, consider disabling the `shouldAcceptNewConnection` function until a patch is available. Restrict access to the XPC Service component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.