Luckyu

Name of the Vulnerable Software and Affected Versions: Windows Common Log File System Driver (affected versions not specified) Description: The issue is related to an elevation of privilege vulnerability in the Windows Common Log File System Driver. It is associated with the dereferencing of an untrusted pointer. Exploitation of this issue may allow an attacker to elevate their privileges. The vulnerability affects Microsoft Windows operating systems. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows Domain Name Service versions (affected versions not specified) Description: The issue is related to a remote code execution problem in the Windows Domain Name Service. It involves the use of insecure mechanisms for handling authentication data in the operating system's memory. This could allow a remote attacker to execute arbitrary code. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 17.7 iPadOS versions prior to 17.7 macOS Ventura versions prior to 13.7 macOS Sonoma versions prior to 14.7 macOS Sequoia versions prior to 15 **Description** A privacy issue was addressed with improved handling of temporary files. This issue allows an app to potentially observe data displayed to the user by Shortcuts. **Recommendations** For iOS versions prior to 17.7, update to iOS 17.7 to resolve the issue. For iPadOS versions prior to 17.7, update to iPadOS 17.7 to resolve the issue. For macOS Ventura versions prior to 13.7, update to macOS Ventura 13.7 to resolve the issue. For macOS Sonoma versions prior to 14.7, update to macOS Sonoma 14.7 to resolve the issue. For macOS Sequoia versions prior to 15, update to macOS Sequoia 15 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 17.7 iPadOS versions prior to 17.7 macOS Ventura versions prior to 13.7 macOS Sonoma versions prior to 14.7 macOS Sequoia versions prior to 15 **Description** The issue concerns the potential output of sensitive user data without consent by a shortcut, which has been addressed through improved redaction of sensitive information. **Recommendations** For iOS versions prior to 17.7, update to iOS 17.7 to resolve the issue. For iPadOS versions prior to 17.7, update to iPadOS 17.7 to resolve the issue. For macOS Ventura versions prior to 13.7, update to macOS Ventura 13.7 to resolve the issue. For macOS Sonoma versions prior to 14.7, update to macOS Sonoma 14.7 to resolve the issue. For macOS Sequoia versions prior to 15, update to macOS Sequoia 15 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Windows Resource Manager PSM Service Extension (affected versions not specified) **Description** The issue is related to the use of insecure mechanisms for handling authentication data in the operating system's memory. This can allow an attacker to elevate their privileges. An elevation-of-privilege vulnerability exists, enabling attackers to affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Resource Manager (affected versions not specified) **Description** The issue is related to a use-after-free memory vulnerability in the Windows Resource Manager PSM service. This could allow an attacker to elevate their privileges. An elevation-of-privilege vulnerability exists, enabling attackers to impact the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Common Log File System Driver versions prior to 10.0.10240.20751 Windows 10 versions <10.0.14393.7259 Windows 10 versions <10.0.17763.6189 Windows 10 versions <10.0.19044.4780 Windows 10 versions <10.0.19045.4780 **Description** This issue is an elevation-of-privilege vulnerability in the Windows Common Log File System Driver. Successful exploitation allows attackers to gain elevated privileges on the system. Raspberry Robin malware has been observed utilizing this vulnerability (CVE-2024-38196) for local privilege escalation. Recent updates to Raspberry Robin include enhanced obfuscation techniques, a shift to ChaCha-20 encryption for network communications, and the use of fake command-and-control server addresses to evade detection. The malware also employs randomized RC4 key seeds per campaign and embeds dates of expiration within its binary code to hinder analysis and detection. **Recommendations** Update Windows Common Log File System Driver to a version equal to or greater than 10.0.10240.20751. Update Windows 10 to a version equal to or greater than 10.0.14393.7259. Update Windows 10 to a version equal to or greater than 10.0.17763.6189. Update Windows 10 to a version equal to or greater than 10.0.19044.4780. Update Windows 10 to a version equal to or greater than 10.0.19045.4780.

**Name of the Vulnerable Software and Affected Versions** Windows (affected versions not specified) **Description** The issue is related to a buffer overflow in memory in the DHCP Server Service of Windows operating systems. This can allow a remote attacker to execute arbitrary code. The vulnerability enables remote attackers to affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows (affected versions not specified) **Description** The issue is related to a buffer overflow in memory in the DHCP Server Service of Windows operating systems. This can allow a remote attacker to execute arbitrary code. The vulnerability enables remote attackers to affect the system by executing arbitrary code. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** macOS Ventura versions prior to 13.6.5 macOS Sonoma versions prior to 14.4 iOS versions prior to 17.4 iPadOS versions prior to 17.4 watchOS versions prior to 10.4 iOS versions prior to 16.7.6 iPadOS versions prior to 16.7.6 **Description** A privacy issue was addressed with improved private data redaction for log entries. This issue may allow an app to access user-sensitive data. **Recommendations** For macOS Ventura versions prior to 13.6.5, update to macOS Ventura 13.6.5. For macOS Sonoma versions prior to 14.4, update to macOS Sonoma 14.4. For iOS versions prior to 17.4, update to iOS 17.4. For iPadOS versions prior to 17.4, update to iPadOS 17.4. For watchOS versions prior to 10.4, update to watchOS 10.4. For iOS versions prior to 16.7.6, update to iOS 16.7.6. For iPadOS versions prior to 16.7.6, update to iPadOS 16.7.6.

**Name of the Vulnerable Software and Affected Versions** Windows (affected versions not specified) **Description** The issue is related to the Windows GDI component and is caused by insufficient access restrictions. It allows an attacker to elevate their privileges. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows GDI (affected versions not specified) **Description** The issue is related to insufficient access control in the Windows GDI component of the Windows operating system. It allows an attacker to elevate their privileges. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Print Spooler (affected versions not specified) **Description** The issue is related to insufficient access control in the Windows Print Spooler, which can be exploited to elevate privileges. This allows an attacker to affect the system. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where this issue was exploited. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.