Dan Reynolds

**Name of the Vulnerable Software and Affected Versions** Windows Storage Management Provider (affected versions not specified) **Description** The issue is an out-of-bounds read that allows an authorized attacker to disclose information locally. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Storage Management Provider (affected versions not specified) **Description** A buffer over-read issue in Windows Storage Management Provider allows an authorized attacker to disclose information locally. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows Common Log File System Driver versions prior to the fixed version Description: The issue is related to a use-after-free flaw in the Windows Common Log File System Driver, which allows an authorized attacker to elevate privileges locally. This could potentially impact system security. Recommendations: For Windows 10 and 11, apply patch KB5058411. For Windows Server, apply patch KB5058405. As a temporary workaround, consider restricting access to the Windows Common Log File System Driver until a patch is applied.

Name of the Vulnerable Software and Affected Versions: Windows Routing and Remote Access Service (RRAS) (affected versions not specified) Description: The issue is related to a buffer overflow in dynamic memory, which can be exploited to execute arbitrary code. This allows remote attackers to affect the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows Routing and Remote Access Service (RRAS) (affected versions not specified) Description: The vulnerability in Windows Routing and Remote Access Service (RRAS) is related to a buffer overflow in dynamic memory. This issue can be exploited by a remote attacker to execute arbitrary code. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Resilient File System (ReFS) (affected versions not specified) **Description** The issue is related to an elevation-of-privilege vulnerability in the Windows Resilient File System (ReFS). It is caused by a buffer overflow in memory, allowing an attacker to potentially gain elevated privileges. This vulnerability can be exploited to affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.