Hyungseok Han

**Name of the Vulnerable Software and Affected Versions** Windows Fast FAT File System Driver (affected versions not specified) **Description** The issue is related to unsafe privilege management in the Windows Fast FAT File System Driver, which can be exploited to elevate privileges. This could allow an attacker to affect the system. No information is available about the estimated number of potentially affected devices or real-world incidents. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows NTFS (affected versions not specified) **Description** The issue is related to insecure privilege management in the Windows NTFS file system, allowing an attacker to elevate their privileges. This can impact the system, potentially enabling unauthorized actions. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows NTFS (affected versions not specified) **Description** The issue is related to insecure privilege management in the Windows NTFS file system, allowing an attacker to elevate their privileges. This can affect the system, potentially leading to unauthorized access or control. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows (affected versions not specified) **Description** The issue is related to a driver vulnerability in the Storage Spaces Controller component of Windows operating systems, which involves the disclosure of information in an error data area. This could allow an attacker to reveal protected information. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows (affected versions not specified) **Description** The issue is related to an information disclosure vulnerability in the Windows Common Log File System Driver. It may allow an attacker to gain unauthorized access to protected information by exploiting the vulnerability. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows (affected versions not specified) **Description** The issue is related to insecure privilege management in the NTFS file system of the Windows operating system. It allows an attacker to elevate their privileges, potentially affecting the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows NTFS (affected versions not specified) **Description** The issue is related to incorrect code generation management in the Windows NTFS file system, allowing remote attackers to execute arbitrary code using a specially crafted request. This can affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows NTFS (affected versions not specified) **Description** The issue is related to insecure privilege management in the Windows NTFS file system, allowing an attacker to elevate their privileges. This can affect the system, potentially leading to unauthorized access or control. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Common Log File System Driver (affected versions not specified) **Description** The issue is related to errors in privilege management. It allows an attacker to gain system privileges. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 10.15.4 **Description** A path handling issue was addressed with improved validation, which could allow a malicious application to overwrite arbitrary files. **Recommendations** For versions prior to 10.15.4, update to macOS Catalina 10.15.4 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 81.0.4044.92 **Description** The issue is related to a use after free vulnerability in the devtools component of Google Chrome, which can be exploited by a remote attacker using a specially crafted HTML page. This could potentially allow the attacker to access confidential data, compromise data integrity, and cause a denial of service. The vulnerability is associated with heap corruption. **Recommendations** For Google Chrome versions prior to 81.0.4044.92, update to version 81.0.4044.92 or later to resolve the issue. As a temporary workaround, consider restricting access to devtools or avoiding the use of potentially vulnerable features until the update is applied.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 10.15.4 **Description** A remote attacker may be able to cause arbitrary javascript code execution due to an injection issue. The issue was addressed with improved validation. **Recommendations** For versions prior to 10.15.4, update to macOS Catalina 10.15.4 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 12.3 macOS Mojave versions prior to 10.14.5 tvOS versions prior to 12.3 Safari versions prior to 12.1.1 iTunes for Windows versions prior to 12.9.5 iCloud for Windows versions prior to 7.12 **Description** The issue is related to memory corruption and buffer overflow, which may lead to arbitrary code execution when processing maliciously crafted web content. This can allow a remote attacker to execute arbitrary code. **Recommendations** For iOS versions prior to 12.3, update to iOS 12.3 or later. For macOS Mojave versions prior to 10.14.5, update to macOS Mojave 10.14.5 or later. For tvOS versions prior to 12.3, update to tvOS 12.3 or later. For Safari versions prior to 12.1.1, update to Safari 12.1.1 or later. For iTunes for Windows versions prior to 12.9.5, update to iTunes for Windows 12.9.5 or later. For iCloud for Windows versions prior to 7.12, update to iCloud for Windows 7.12 or later.

**Name of the Vulnerable Software and Affected Versions** Microsoft Edge (affected versions not specified) **Description** The issue is related to errors in handling objects in memory by the ChakraCore JavaScript engine. This could allow a remote attacker to execute arbitrary code, potentially gaining the same user rights as the current user. If the current user has administrative rights, the attacker could take control of the affected system, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 12.1.1 tvOS versions prior to 12.1.1 watchOS versions prior to 5.1.2 Safari versions prior to 12.0.2 iTunes for Windows versions prior to 12.9.2 iCloud for Windows versions prior to 7.9 Description: Multiple memory corruption issues were addressed with improved memory handling. Recommendations: For iOS versions prior to 12.1.1, update to version 12.1.1 or later. For tvOS versions prior to 12.1.1, update to version 12.1.1 or later. For watchOS versions prior to 5.1.2, update to version 5.1.2 or later. For Safari versions prior to 12.0.2, update to version 12.0.2 or later. For iTunes for Windows versions prior to 12.9.2, update to version 12.9.2 or later. For iCloud for Windows versions prior to 7.9, update to version 7.9 or later.

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 12.1 tvOS versions prior to 12.1 watchOS versions prior to 5.1 Safari versions prior to 12.0.1 iTunes versions prior to 12.9.1 iCloud for Windows versions prior to 7.8 Description: A memory corruption issue was addressed with improved validation. Recommendations: For iOS versions prior to 12.1, update to version 12.1 or later. For tvOS versions prior to 12.1, update to version 12.1 or later. For watchOS versions prior to 5.1, update to version 5.1 or later. For Safari versions prior to 12.0.1, update to version 12.0.1 or later. For iTunes versions prior to 12.9.1, update to version 12.9.1 or later. For iCloud for Windows versions prior to 7.8, update to version 7.8 or later.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 12.1.1 tvOS versions prior to 12.1.1 watchOS versions prior to 5.1.2 Safari versions prior to 12.0.2 iTunes for Windows versions prior to 12.9.2 iCloud for Windows versions prior to 7.9 **Description** Multiple memory corruption issues were addressed with improved memory handling. **Recommendations** For iOS versions prior to 12.1.1, update to iOS 12.1.1 or later. For tvOS versions prior to 12.1.1, update to tvOS 12.1.1 or later. For watchOS versions prior to 5.1.2, update to watchOS 5.1.2 or later. For Safari versions prior to 12.0.2, update to Safari 12.0.2 or later. For iTunes for Windows versions prior to 12.9.2, update to iTunes 12.9.2 or later. For iCloud for Windows versions prior to 7.9, update to iCloud for Windows 7.9 or later.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 12.1 tvOS versions prior to 12.1 watchOS versions prior to 5.1 Safari versions prior to 12.0.1 iTunes versions prior to 12.9.1 iCloud for Windows versions prior to 7.8 **Description** Multiple memory corruption issues were addressed with improved memory handling. **Recommendations** For iOS versions prior to 12.1, update to iOS 12.1 or later. For tvOS versions prior to 12.1, update to tvOS 12.1 or later. For watchOS versions prior to 5.1, update to watchOS 5.1 or later. For Safari versions prior to 12.0.1, update to Safari 12.0.1 or later. For iTunes versions prior to 12.9.1, update to iTunes 12.9.1 or later. For iCloud for Windows versions prior to 7.8, update to iCloud for Windows 7.8 or later.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 10.13.2 **Description** The issue involves the `IOAcceleratorFamily` component and allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. **Recommendations** For macOS versions prior to 10.13.2, update to version 10.13.2 or later to resolve the issue.