Billy Jheng Bing Jhong

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 26.5.2 iPadOS versions prior to 26.5.2 macOS Tahoe versions prior to 26.5.2 **Description** Improper input validation in the operating system kernel allows a malicious app to pass crafted data into a privileged system or kernel-facing interface. This can lead to kernel memory corruption, where the system's core memory is modified in an unintended way, or unexpected system termination. An attacker can exploit this by running a specially crafted app locally on a device to trigger the vulnerable code path and feed malformed inputs into the kernel, potentially resulting in a denial of service through forced reboots or privilege escalation. **Recommendations** Update iOS to version 26.5.2. Update iPadOS to version 26.5.2. Update macOS Tahoe to version 26.5.2.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 18.7.9 iPadOS versions prior to 18.7.9 iOS versions prior to 26.5 iPadOS versions prior to 26.5 macOS Sequoia versions prior to 15.7.7 macOS Sonoma versions prior to 14.8.7 macOS Tahoe versions prior to 26.5 tvOS versions prior to 26.5 visionOS versions prior to 26.5 watchOS versions prior to 26.5 **Description** An out-of-bounds write issue exists due to insufficient input validation. This flaw allows an application to write to kernel memory or cause unexpected system termination. **Recommendations** Update iOS to version 18.7.9 Update iPadOS to version 18.7.9 Update iOS to version 26.5 Update iPadOS to version 26.5 Update macOS Sequoia to version 15.7.7 Update macOS Sonoma to version 14.8.7 Update macOS Tahoe to version 26.5 Update tvOS to version 26.5 Update visionOS to version 26.5 Update watchOS to version 26.5

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 18.7.9 iPadOS versions prior to 18.7.9 iOS versions prior to 26.5 iPadOS versions prior to 26.5 macOS Sequoia versions prior to 15.7.7 macOS Sonoma versions prior to 14.8.7 macOS Tahoe versions prior to 26.5 tvOS versions prior to 26.5 visionOS versions prior to 26.5 watchOS versions prior to 26.5 **Description** A buffer overflow, which occurs when more data is written to a memory block than it can hold, was identified. A local user could exploit this to cause unexpected system termination or read kernel memory. **Recommendations** Update iOS to version 18.7.9 or 26.5 Update iPadOS to version 18.7.9 or 26.5 Update macOS Sequoia to version 15.7.7 Update macOS Sonoma to version 14.8.7 Update macOS Tahoe to version 26.5 Update tvOS to version 26.5 Update visionOS to version 26.5 Update watchOS to version 26.5

**Name of the Vulnerable Software and Affected Versions** Samsung Mobile Processor Exynos 1380 (affected versions not specified) **Description** A Use-After-Free issue in the mobile processor leads to privilege escalation. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Samsung Mobile Processor Exynos versions 1480, 2200, and 2400 **Description** An issue was discovered in the mobile processor, where a Use-After-Free leads to privilege escalation. **Recommendations** For Samsung Mobile Processor Exynos versions 1480, 2200, and 2400, at the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Samsung Mobile Processor Exynos versions 980 through 9825, 990, 1080, 2100, 1280, 2200, and 1380 **Description** An issue was discovered in Samsung Mobile Processor Exynos, where a Double Free in the mobile processor leads to privilege escalation. **Recommendations** For Samsung Mobile Processor Exynos versions 980 through 9825, 990, 1080, 2100, 1280, 2200, and 1380, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Samsung Mobile Processor Exynos versions 1480 through 2400 **Description** An issue was discovered in the Samsung Mobile Processor Exynos, where the lack of a length check leads to out-of-bounds writes. **Recommendations** For Samsung Mobile Processor Exynos versions 1480 through 2400, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Samsung Mobile Processor Exynos versions 1480 and 2400 **Description** An issue was discovered in the Samsung Mobile Processor Exynos, where the lack of a length check leads to out-of-bounds writes. **Recommendations** For Samsung Mobile Processor Exynos version 1480, consider implementing a length check to prevent out-of-bounds writes until a patch is available. For Samsung Mobile Processor Exynos version 2400, consider implementing a length check to prevent out-of-bounds writes until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Samsung Mobile Processor Exynos versions 980, 990, 1080, 2100, 1280, 2200, 1380 **Description** A Use-After-Free issue in the mobile processor leads to privilege escalation. **Recommendations** For Samsung Mobile Processor Exynos versions 980, 990, 1080, 2100, 1280, 2200, 1380, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Samsung Mobile Processor Exynos versions 1280, 1380, 1480, 2200, 2400 **Description** An issue was discovered in Samsung Mobile Processor Exynos, where the absence of a NULL check leads to a Denial of Service. **Recommendations** For Samsung Mobile Processor Exynos versions 1280, 1380, 1480, 2200, 2400, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Samsung Mobile Processor Exynos versions 1280, 1380, 1480, 2200, 2400 **Description** A Double Free issue in the mobile processor can lead to privilege escalation. This issue affects Samsung Mobile Processor Exynos models 1280, 1380, 1480, 2200, and 2400. **Recommendations** For Samsung Mobile Processor Exynos versions 1280, 1380, 1480, 2200, 2400, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Samsung Mobile Processor Exynos 1380 (affected versions not specified) **Description** An issue was discovered in the Samsung Mobile Processor Exynos 1380, where the lack of a length check leads to out-of-bounds writes. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Samsung Mobile Processor Exynos versions 1480, 2200, and 2400 **Description** A Use-After-Free issue in the mobile processor leads to privilege escalation. **Recommendations** For Samsung Mobile Processor Exynos versions 1480, 2200, and 2400, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Samsung Mobile Processor Exynos versions 1480 and 2400 **Description** The issue is related to the lack of a length check, which leads to out-of-bounds writes. This problem was discovered in the Samsung Mobile Processor Exynos. **Recommendations** For Samsung Mobile Processor Exynos versions 1480 and 2400, consider implementing a length check to prevent out-of-bounds writes until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Samsung Mobile Processor Exynos versions 1480, 2200, and 2400 **Description** A Use-After-Free issue in the mobile processor can lead to privilege escalation. **Recommendations** For Samsung Mobile Processor Exynos versions 1480, 2200, and 2400, at the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Microsoft SharePoint Server (affected versions not specified) **Description** A flaw exists in Microsoft SharePoint Server that enables remote attackers to execute arbitrary code and compromise the system. The issue stems from insufficient input validation. Exploitation of this flaw could allow an attacker to execute code remotely by using specially crafted data. This is a post-authentication remote code execution issue. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Linux kernel versions 5.1 through 6.0.3 **Description** A use-after-free issue exists in the io uring asynchronous input/output interface of the Linux kernel, specifically related to Unix SCM garbage collection and the improper update of reference counts. This flaw allows an unprivileged user to escalate privileges to root level. Technical exploitation may involve using inode locking to pause a kernel thread and employing the DirtyCred file exploitation technique. **Recommendations** Update Linux kernel to a version later than 6.0.3.

**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** The issue is related to the smb2 ioctl query info function in the Linux kernel's Common Internet File System (CIFS), specifically due to an incorrect return from the memdup user function. This flaw allows a local, privileged attacker to crash the system, resulting in a denial of service. The estimated number of potentially affected devices is not provided. There is no information about real-world incidents where this issue was exploited. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Oracle VM VirtualBox versions prior to 6.1.24 **Description** The issue is related to insufficient input validation in the Core component of Oracle VM VirtualBox, allowing a high-privileged attacker with logon to the infrastructure to compromise Oracle VM VirtualBox. Successful attacks can result in unauthorized access to some of Oracle VM VirtualBox's accessible data, including the ability to cause a hang or crash, as well as unauthorized update, insert, or delete access to some data and unauthorized read access to a subset of data. This issue applies to Solaris x86 and Linux systems only. **Recommendations** For Oracle VM VirtualBox versions prior to 6.1.24, update to version 6.1.24 or later to resolve the issue. As a temporary workaround, consider restricting access to the Core component of Oracle VM VirtualBox to minimize the risk of exploitation. Additionally, ensure that only authorized and trusted users have logon access to the infrastructure where Oracle VM VirtualBox executes.