Pr0Ln

**Name of the Vulnerable Software and Affected Versions** Windows Cloud Files Mini Filter Driver (affected versions not specified) **Description** A heap-based buffer overflow exists in the Windows Cloud Files Mini Filter Driver `cldflt.sys`. This issue allows a local attacker to escalate privileges from a regular user to SYSTEM. The flaw can be triggered by crafting a custom reparse point to corrupt an adjacent ` WNF STATE DATA` object. This corruption can be leveraged to leak kernel pointers from an ALPC handle table object. Further exploitation involves corrupting a `PipeAttribute` object to leak token addresses and override privileges. Technical exploitation methods include using WNF Out-of-Bounds (OOB), Pipe Attributes, ALPC, and I/O Ring mechanisms to achieve arbitrary kernel read/write primitives or flip the ` KTHREAD.PreviousMode` and strip ` EPROCESS.Protection`. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** VMware Workstation and Fusion (affected versions not specified) **Description** The issue is related to an information disclosure vulnerability in the Host Guest File Sharing (HGFS) functionality. A malicious actor with local administrative privileges on a virtual machine may be able to read privileged information contained in hypervisor memory from a virtual machine. This is due to insufficient access control in the HGFS functionality. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** VMware Workstation versions prior to 17.5 VMware Fusion versions prior to 13.5 **Description** An out-of-bounds read issue exists in the functionality used to share host Bluetooth devices with a virtual machine. A malicious actor with local administrative privileges on a virtual machine can exploit this to read privileged information stored in the hypervisor memory. **Recommendations** Update VMware Workstation to version 17.5 or later. Update VMware Fusion to version 13.5 or later.