Ceri Coburn

**Name of the Vulnerable Software and Affected Versions** Windows Hello (affected versions not specified) **Description** The issue allows an authorized attacker to disclose sensitive information locally through exposure of sensitive information to an unauthorized actor in Windows Hello. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Kerberos (affected versions not specified) **Description** The issue is related to insecure storage of sensitive information in Windows Kerberos, allowing an authorized attacker to bypass a security feature locally. This can potentially lead to the disclosure of protected information. The vulnerability is considered critical and has a low attack complexity, meaning it can be exploited by individuals with minimal system privileges. Although there have been no confirmed exploits reported in the wild, the likelihood of exploitation is classified as 'More Likely'. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Kerberos (affected versions not specified) **Description** The issue is related to a security-feature bypass vulnerability in the implementation of the Kerberos protocol in Windows operating systems. This vulnerability is associated with the unprotected storage of confidential information. Exploitation of this issue may allow an attacker to gain unauthorized access to protected information. The vulnerability can be exploited via Kerberos TGT, allowing attackers to bypass Windows Credential Guard. It is estimated to impact Windows users. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** VMware Enhanced Authentication Plug-in (EAP) (affected versions not specified) **Description** The issue is related to arbitrary authentication relay and session hijack vulnerabilities in the deprecated VMware Enhanced Authentication Plug-in (EAP). This could allow a malicious actor to trick a target domain user with EAP installed in their web browser into requesting and relaying service tickets for arbitrary Active Directory Service Principal Names (SPNs). The estimated number of potentially affected devices worldwide is over 312,700 services. **Recommendations** Uninstall the deprecated Enhanced Authentication Plugin (EAP) from affected systems. As a temporary workaround, consider restricting access to the EAP plugin until it is uninstalled. Avoid using the EAP plugin for authentication until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** VMware Enhanced Authentication Plug-in (affected versions not specified) **Description** The issue is related to a Session Hijack vulnerability in the Deprecated VMware Enhanced Authentication Plug-in. This could allow a malicious actor with unprivileged local access to a Windows operating system to hijack a privileged EAP session when initiated by a privileged domain user on the same system. The vulnerability is associated with incorrect session management. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** MFPs (multifunction printers) from FUJIFILM Business Innovation Corp. and Xerox Corporation (affected versions not specified) **Description** The multifunction printers provided by FUJIFILM Business Innovation Corp. and Xerox Corporation have a facility to export the contents of their Address Book in encrypted form. However, the encryption strength is insufficient. With knowledge of the encryption process and the encryption key, an attacker may obtain sensitive information, such as server credentials, from the exported Address Book data. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** CyberGhostVPN Windows Client versions prior to 8.3.10.10015 **Description** A DLL injection issue was found in the Dashboard.exe component of the CyberGhostVPN Windows Client. **Recommendations** For versions prior to 8.3.10.10015, update to version 8.3.10.10015 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Windows Enterprise App Management Service (affected versions not specified) **Description** The issue exists due to insufficient input validation in the Windows Enterprise App Management Service, allowing remote attackers to execute arbitrary code. This can affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Docker Desktop versions through 2.2.0.5 **Description** An issue allows a local attacker to intercept a connection attempt from Docker Service, which runs as SYSTEM, by setting up their own named pipe with the same name prior to starting Docker. This enables the attacker to impersonate the privileges of the Docker Service. **Recommendations** For Docker Desktop versions through 2.2.0.5, update to a version later than 2.2.0.5 to resolve the issue. As a temporary workaround, consider restricting access to named pipes to minimize the risk of exploitation.