Or Yair

Name of the Vulnerable Software and Affected Versions: Windows Print Spooler Components (affected versions not specified) Description: An uncontrolled resource consumption issue in Windows Print Spooler Components can allow an attacker to cause a denial of service. Exploitation may allow a remote attacker to cause a system outage. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows Netlogon (affected versions not specified) Description: An uncontrolled resource consumption issue in Windows Netlogon can allow an unauthorized attacker to cause a denial of service over a network. This denial-of-service vulnerability allows attackers to affect the system. The vulnerability is related to uncontrolled resource usage. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows versions (affected versions not specified) **Description** An uncontrolled resource consumption issue in the Windows Local Security Authority Subsystem Service (LSASS) can allow an unauthorized attacker to cause a denial of service over a network. This issue enables attackers to disrupt system functionality. Reports indicate that the vulnerability, identified as CVE-2025-32724, is being exploited by 'win-dDoS' to compromise domain controllers and use them as DDoS botnet participants, potentially affecting up to 10,000 domain controllers. The exploitation leverages LDAP referrals and does not require credentials. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows (affected versions not specified) **Description** The issue is related to an elevation-of-privilege vulnerability in Windows Storage Services, which is caused by incorrect handling of symbolic links before accessing a file. This could allow an attacker to elevate their privileges. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Process Explorer versions prior to 17.04 **Description** The issue allows attackers to make Process Explorer functionally unavailable, resulting in a denial of service for analysis. This can be achieved by renaming an executable file to a new extensionless 255-character name and launching it with `NtCreateUserProcess`. The problem stems from an issue in `wcscat s` error handling. **Recommendations** For versions prior to 17.04, update to version 17.04 or later to resolve the issue. As a temporary workaround, consider avoiding the use of `NtCreateUserProcess` with renamed executable files until a patch is applied. Restrict access to renaming executable files to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Windows (affected versions not specified) **Description** The issue is related to the Volume Shadow Copy Service (VSS) in Windows operating systems and is caused by inadequate access restrictions. This can allow an attacker to elevate their privileges. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Avast Antivirus versions prior to 22.10 AVG Anti-Virus versions prior to 22.10 **Description** The issue is related to insecure privilege management within the malware removal functionality of Avast and AVG Antivirus. An attacker with write access to the filesystem can exploit this to escalate their privileges in certain scenarios. **Recommendations** For Avast Antivirus versions prior to 22.10, update to version 22.10 to resolve the issue. For AVG Anti-Virus versions prior to 22.10, update to version 22.10 to resolve the issue. As a temporary workaround, consider restricting write access to the filesystem to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Avast Antivirus (affected versions not specified) Avira Antivirus (affected versions not specified) AVG Antivirus (affected versions not specified) Norton Antivirus (affected versions not specified) **Description** The issue is related to a Privilege Escalation vulnerability, which allows an attacker to gain elevated access to resources that are normally protected from an application or user. This vulnerability is associated with insufficient access control. The estimated severity of this issue is significant, as it can be exploited to develop attacks and elevate privileges in the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Avast Antivirus versions prior to 18.0.1478 **Description** The issue is related to a heap corruption vulnerability in the aswjsflt.dll library of Avast Antivirus, which could allow an attacker to bypass the sandbox of the application it was loaded into. This vulnerability is associated with a buffer overflow in memory when loading the aswjsflt.dll library. **Recommendations** For versions prior to 18.0.1478, update the Script Shield Component to version 18.0.1478 to resolve the issue. As a temporary workaround, consider restricting the use of the aswjsflt.dll library until the update is applied.