René Freingruber

**Nome do software vulnerável e versões afetadas** NextCloud Desktop Client versão 2.6.4 **Descrição** Existe um problema de corrupção de memória devido à ausência das proteções Address Space Layout Randomization (ASLR) e Data Execution Prevention (DEP) na versão do software para Windows, o que permite a corrupção de memória. **Recomendações** Para o NextCloud Desktop Client versão 2.6.4, considere atualizar para uma versão mais recente que inclua as proteções ASLR e DEP para evitar a corrupção de memória.

**Name of the Vulnerable Software and Affected Versions** Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers **Description** The issue is related to the NTFS file system in Windows operating systems, which has inadequate access control checks. This can be exploited by an attacker using a specially crafted application to elevate their privileges. **Recommendations** For Windows 7, update to a newer version to mitigate the risk. For Windows Server 2012 R2, update to a newer version to mitigate the risk. For Windows RT 8.1, update to a newer version to mitigate the risk. For Windows Server 2008, update to a newer version to mitigate the risk. For Windows Server 2012, update to a newer version to mitigate the risk. For Windows 8.1, update to a newer version to mitigate the risk. For Windows Server 2016, update to a newer version to mitigate the risk. For Windows Server 2008 R2, update to a newer version to mitigate the risk. For Windows 10, update to a newer version to mitigate the risk. For Windows 10 Servers, update to a newer version to mitigate the risk.