Alex Oudenaarden

**Name of the Vulnerable Software and Affected Versions** MarvinTest Solutions Hardware Access Driver versions 5.0.3.0 and before **Description** An issue in the Hardware Access Driver allows a local attacker to escalate privileges via the Hw65.sys component. **Recommendations** For versions 5.0.3.0 and before, update to version 5.0.4.0 to resolve the issue. As a temporary workaround, consider restricting access to the Hw65.sys component until the update is applied.

**Name of the Vulnerable Software and Affected Versions** MicroWorld Technologies Inc eScan Antivirus version 4.0.0.49 **Description** A kernel handle leak issue in ProcObsrvesx.sys could allow privilege escalation for low-privileged users. **Recommendations** For version 4.0.0.49, consider updating to a newer version that addresses the kernel handle leak issue in ProcObsrvesx.sys to prevent privilege escalation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Topaz Antifraud version 2.0.0.0 **Description** The `wsftprm.sys` kernel driver allows low-privileged attackers to terminate any Protected Process Light (PPL) process. This is achieved by sending a malicious IOCTL (Input/Output Control) request, which triggers the `ZwTerminateProcess()` function at the kernel level. This capability can be used to disable security software, such as Antivirus or Endpoint Detection and Response (EDR) systems. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Ivanti Secure Access Client versions prior to 22.6R1.1 **Description** A vulnerability exists in the Ivanti Secure Access Client, which could allow a locally authenticated attacker to exploit a vulnerable configuration. This could potentially lead to a denial of service (DoS) condition on the user machine and, in some cases, result in a full compromise of the system. **Recommendations** For versions prior to 22.6R1.1, update to version 22.6R1.1 or later to resolve the issue. As a temporary workaround, consider restricting access to vulnerable configurations until a patch is applied.

**Name of the Vulnerable Software and Affected Versions** Ivanti Secure Access Client versions prior to 22.6R1.1 **Description** A locally authenticated attacker could exploit a vulnerable configuration, potentially leading to a denial of service (DoS) condition on the user machine. **Recommendations** For versions prior to 22.6R1.1, update to version 22.6R1.1 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Macrium Reflect versions 8.1.7544 and below **Description** A buffer overflow in Macrium Reflect allows attackers to escalate privileges or execute arbitrary code. **Recommendations** For Macrium Reflect versions 8.1.7544 and below, update to a version above 8.1.7544 to resolve the issue.