Netanel Ben Simon

Name of the Vulnerable Software and Affected Versions: Windows BitLocker (affected versions not specified) Description: A time-of-check time-of-use (toctou) race condition in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack. This issue raises concerns about the safety of encrypted data. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows BitLocker (affected versions not specified) Description: A time-of-check time-of-use (toctou) race condition exists, allowing an unauthorized attacker to bypass a security feature with a physical attack. This issue enables attackers to circumvent the encryption provided by BitLocker. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows BitLocker (affected versions not specified) Description: A protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack. This issue enables attackers to access encrypted data. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows BitLocker (affected versions not specified) Description: A protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows BitLocker (affected versions not specified) **Description** An issue exists where the acceptance of extraneous untrusted data alongside trusted data allows an unauthorized attacker to bypass a security feature. This exploit requires physical access to the system and can be achieved through a downgrade attack. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows (affected versions not specified) Description: The issue is related to an elevation-of-privilege vulnerability in the Windows Kernel. It involves the dereferencing of an untrusted pointer, which can be exploited by an attacker to elevate their privileges. This vulnerability affects the system and can be used by attackers to gain elevated access. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows (affected versions not specified) **Description** The issue is related to an integer overflow in the Resume Extensible Firmware Interface of Microsoft Windows operating systems. This allows an attacker to bypass the UEFI Secure Boot protection mechanism. A security-feature bypass vulnerability exists, enabling attackers to affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Resume Extensible Firmware Interface (affected versions not specified) **Description** The issue is related to a security-feature bypass vulnerability in the Resume Extensible Firmware Interface of Microsoft Windows operating systems. It involves the dereferencing of an unreliable pointer. Exploitation of this issue may allow an attacker to bypass the UEFI Secure Boot protection mechanism. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Resume Extensible Firmware Interface (affected versions not specified) **Description** The issue is related to a security-feature bypass vulnerability in the Resume Extensible Firmware Interface of Microsoft Windows operating systems. It involves the dereferencing of an unreliable pointer. Exploitation of this issue may allow an attacker to bypass the UEFI Secure Boot protection mechanism. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Office (affected versions not specified) Microsoft Office Compatibility Pack (affected versions not specified) Microsoft Word (affected versions not specified) **Description** This issue is a remote code execution flaw in Microsoft Office software. The problem stems from improper handling of objects in memory. A successful exploit allows an attacker to execute arbitrary code with the privileges of the current user. If the user has administrative rights, the attacker could gain full control of the system, including the ability to install programs, modify or delete data, and create new accounts. Exploitation requires a user to open a specially crafted file using an affected version of Microsoft Office or Microsoft WordPad. The Cloud Atlas threat group has been observed utilizing this vulnerability in attacks, deploying malware like VBCloud via phishing emails containing malicious documents that exploit the flaw in the equation editor. These attacks primarily target users in Russia. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.