Dongjun Kim

**Name of the Vulnerable Software and Affected Versions** Microsoft Exchange Server (affected versions not specified) **Description** Improper neutralization of input during web page generation leads to cross-site scripting (XSS), a condition where malicious scripts are injected into trusted websites. Additionally, a server-side request forgery (SSRF) issue exists, which occurs when a server is tricked into making unintended requests to internal or external resources. These flaws allow attackers to perform spoofing over a network. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Exchange Server (affected versions not specified) **Description** A server-side request forgery (SSRF) allows an authorized attacker to disclose sensitive information over a network and affect the system. SSRF is a flaw where a server is tricked into making requests to an unintended location. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Telephony Service (affected versions not specified) **Description** A use after free issue in the Windows Telephony Service allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Kernel (affected versions not specified) **Description** A stack-based buffer overflow in the Windows Kernel allows an authorized attacker to elevate privileges locally. A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially overwriting adjacent memory. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows USB Print Driver versions prior to April 2026 **Description** A heap-based buffer overflow in the Windows USB Printing Stack `usbprint.sys` allows an unauthorized attacker to elevate privileges. This issue can be exploited through a physical attack. **Recommendations** Update to the version released in April 2026.

Name of the Vulnerable Software and Affected Versions: Windows versions (affected versions not specified) Description: A use after free issue exists in Windows PrintWorkflowUserSvc, potentially allowing an authorized attacker to gain elevated privileges locally. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows (affected versions not specified) Description: The issue is related to a null pointer dereference in Windows Drivers, allowing an unauthorized attacker to elevate privileges locally. This could potentially affect the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows Digital Media (affected versions not specified) Description: The issue is related to a use after free condition in Windows Digital Media, allowing an authorized attacker to elevate privileges locally. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows Digital Media (affected versions not specified) Description: The issue is related to a use after free condition in Windows Digital Media, allowing an authorized attacker to elevate privileges locally. This elevation-of-privilege vulnerability enables attackers to affect the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows Digital Media (affected versions not specified) Description: The issue is related to a use after free condition in Windows Digital Media, which can be exploited by an authorized attacker to elevate privileges locally. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows Resilient File System (ReFS) Deduplication Service (affected versions not specified) Description: The issue is related to an elevation of privilege vulnerability in the Windows Resilient File System (ReFS) Deduplication Service. It is caused by a memory reuse error. Exploitation of this issue may allow an attacker to elevate their privileges. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows Resilient File System (ReFS) Deduplication Service (affected versions not specified) Description: The issue is related to an elevation of privilege vulnerability in the Windows Resilient File System (ReFS) Deduplication Service. It is caused by a memory reuse error, which can be exploited to allow an attacker to elevate their privileges. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** iPadOS versions prior to 17.7.4 macOS Ventura versions prior to 13.7.3 macOS Sonoma versions prior to 14.7.3 visionOS versions prior to 2.3 iOS versions prior to 18.3 iPadOS versions prior to 18.3 macOS Sequoia versions prior to 15.3 watchOS versions prior to 11.3 tvOS versions prior to 18.3 **Description** The issue was addressed with improved memory handling. Processing an image may lead to a denial-of-service. The vulnerability is related to incorrect cleanup or release of resources in the Image Handler component of the operating systems. **Recommendations** For iPadOS versions prior to 17.7.4, update to iPadOS 17.7.4 or later. For macOS Ventura versions prior to 13.7.3, update to macOS Ventura 13.7.3 or later. For macOS Sonoma versions prior to 14.7.3, update to macOS Sonoma 14.7.3 or later. For visionOS versions prior to 2.3, update to visionOS 2.3 or later. For iOS versions prior to 18.3, update to iOS 18.3 or later. For iPadOS versions prior to 18.3, update to iPadOS 18.3 or later. For macOS Sequoia versions prior to 15.3, update to macOS Sequoia 15.3 or later. For watchOS versions prior to 11.3, update to watchOS 11.3 or later. For tvOS versions prior to 18.3, update to tvOS 18.3 or later.