Alexander Pudwill

**Name of the Vulnerable Software and Affected Versions** Trend Micro Apex One (affected versions not specified) Trend Micro Worry-Free Business Security (affected versions not specified) **Description** An insecure access control issue could allow a local attacker to overwrite key memory-mapped files, potentially having severe consequences for the security and stability of affected installations. The attacker must first obtain the ability to execute low-privileged code on the target system to exploit this issue. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Kernel (affected versions not specified) **Description** The issue is related to improper privilege management in the Windows Kernel, allowing an unauthorized attacker to elevate privileges locally. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** SolarWinds Dameware Mini Remote Control versions prior to 12.3.2 **Description** The issue is related to incorrect permissions in the SolarWinds Dameware Mini Remote Control Service, which can allow an attacker to escalate privileges locally. This vulnerability requires local access and a valid low-privilege account to be susceptible. **Recommendations** For versions prior to 12.3.2, update to version 12.3.2 immediately to resolve the issue. As a temporary workaround, consider restricting access to the service to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Dell Command | Update, Dell Update, and Alienware Update versions prior to 4.7 **Description** The issue is related to the exposure of sensitive system information to an unauthorized control sphere. A local malicious user could potentially exploit this vulnerability, leading to the disclosure of confidential data. The vulnerability is located in the download operation component. **Recommendations** For versions prior to 4.7, update to version 4.7 or later to resolve the issue. As a temporary workaround, consider restricting access to the download operation component until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Dell Command Update, Dell Update and Alienware Update versions prior to 4.6.0 **Description** The issue is related to a Local Privilege Escalation Vulnerability in the custom catalog configuration. A local malicious user may potentially exploit this vulnerability to elevate their privileges. **Recommendations** For versions prior to 4.6.0, update to version 4.6.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the custom catalog configuration until a patch is applied.

**Name of the Vulnerable Software and Affected Versions** Dell Command | Update, Dell Update, and Alienware Update versions prior to 4.5 **Description** A Local Privilege Escalation issue exists in the Advanced Driver Restore component, allowing a local malicious user to potentially exploit this issue and gain elevated privileges. **Recommendations** For versions prior to 4.5, update to version 4.5 or later to resolve the issue. As a temporary workaround, consider disabling the Advanced Driver Restore component until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Ricoh Windows printer drivers (affected versions not specified) PCL6 Driver for Universal Print versions prior to 4.0 PS Driver for Universal Print versions prior to 4.0 PC FAX Generic Driver versions prior to 2020 Generic PCL5 Driver versions prior to 2020 RPCS Driver versions prior to 2020 PostScript3 Driver versions prior to 2020 PCL6 (PCL XL) Driver versions prior to 2020 RPCS Raster Driver versions prior to 2020 **Description** An issue was discovered in Ricoh Windows printer drivers that allows attackers local privilege escalation. **Recommendations** For PCL6 Driver for Universal Print versions prior to 4.0, update to version 4.0 or later. For PS Driver for Universal Print versions prior to 4.0, update to version 4.0 or later. For PC FAX Generic Driver versions prior to 2020, update to a version released in 2020 or later. For Generic PCL5 Driver versions prior to 2020, update to a version released in 2020 or later. For RPCS Driver versions prior to 2020, update to a version released in 2020 or later. For PostScript3 Driver versions prior to 2020, update to a version released in 2020 or later. For PCL6 (PCL XL) Driver versions prior to 2020, update to a version released in 2020 or later. For RPCS Raster Driver versions prior to 2020, update to a version released in 2020 or later.