Smlijun

**Name of the Vulnerable Software and Affected Versions** Microsoft Exchange Server (affected versions not specified) **Description** Improper neutralization of input during web page generation leads to cross-site scripting (XSS), a condition where malicious scripts are injected into trusted websites. Additionally, a server-side request forgery (SSRF) issue exists, which occurs when a server is tricked into making unintended requests to internal or external resources. These flaws allow attackers to perform spoofing over a network. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Exchange Server (affected versions not specified) **Description** A server-side request forgery (SSRF) allows an authorized attacker to disclose sensitive information over a network and affect the system. SSRF is a flaw where a server is tricked into making requests to an unintended location. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows versions (affected versions not specified) Description: A use after free issue exists in Windows PrintWorkflowUserSvc, potentially allowing an authorized attacker to gain elevated privileges locally. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows (affected versions not specified) Description: The issue is related to a null pointer dereference in Windows Drivers, allowing an unauthorized attacker to elevate privileges locally. This could potentially affect the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows Digital Media (affected versions not specified) Description: The issue is related to a use after free condition in Windows Digital Media, which can be exploited by an authorized attacker to elevate privileges locally. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows Digital Media (affected versions not specified) Description: The issue is related to a use after free condition in Windows Digital Media, allowing an authorized attacker to elevate privileges locally. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows Digital Media (affected versions not specified) Description: The issue is related to a use after free condition in Windows Digital Media, allowing an authorized attacker to elevate privileges locally. This elevation-of-privilege vulnerability enables attackers to affect the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows Resilient File System (ReFS) Deduplication Service (affected versions not specified) Description: The issue is related to an elevation of privilege vulnerability in the Windows Resilient File System (ReFS) Deduplication Service. It is caused by a memory reuse error. Exploitation of this issue may allow an attacker to elevate their privileges. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows Resilient File System (ReFS) Deduplication Service (affected versions not specified) Description: The issue is related to an elevation of privilege vulnerability in the Windows Resilient File System (ReFS) Deduplication Service. It is caused by a memory reuse error, which can be exploited to allow an attacker to elevate their privileges. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** iPadOS versions prior to 17.7.4 macOS Ventura versions prior to 13.7.3 macOS Sonoma versions prior to 14.7.3 visionOS versions prior to 2.3 iOS versions prior to 18.3 iPadOS versions prior to 18.3 macOS Sequoia versions prior to 15.3 watchOS versions prior to 11.3 tvOS versions prior to 18.3 **Description** The issue was addressed with improved memory handling. Processing an image may lead to a denial-of-service. The vulnerability is related to incorrect cleanup or release of resources in the Image Handler component of the operating systems. **Recommendations** For iPadOS versions prior to 17.7.4, update to iPadOS 17.7.4 or later. For macOS Ventura versions prior to 13.7.3, update to macOS Ventura 13.7.3 or later. For macOS Sonoma versions prior to 14.7.3, update to macOS Sonoma 14.7.3 or later. For visionOS versions prior to 2.3, update to visionOS 2.3 or later. For iOS versions prior to 18.3, update to iOS 18.3 or later. For iPadOS versions prior to 18.3, update to iPadOS 18.3 or later. For macOS Sequoia versions prior to 15.3, update to macOS Sequoia 15.3 or later. For watchOS versions prior to 11.3, update to watchOS 11.3 or later. For tvOS versions prior to 18.3, update to tvOS 18.3 or later.

**Name of the Vulnerable Software and Affected Versions** WebKitGTK versions prior to the fixed version WPE WebKit versions prior to the fixed version tvOS versions prior to 17 Safari versions prior to 17 watchOS versions prior to 10 iOS versions prior to 17 iPadOS versions prior to 17 macOS versions prior to Sonoma 14 **Description** The issue is related to a buffer overflow in memory, which may allow a remote attacker to access confidential data, compromise its integrity, and cause a denial of service. Processing web content may lead to arbitrary code execution. **Recommendations** For WebKitGTK, update to a version that includes improved memory handling. For WPE WebKit, update to a version that includes improved memory handling. For tvOS, update to version 17 or later. For Safari, update to version 17 or later. For watchOS, update to version 10 or later. For iOS, update to version 17 or later. For iPadOS, update to version 17 or later. For macOS, update to Sonoma 14 or later.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to Sonoma 14 Safari versions prior to 17 iOS versions prior to 17 iPadOS versions prior to 17 **Description** The issue is caused by a buffer overflow in the WebKit component of the macOS operating system. Exploitation of this issue may allow a local attacker to execute arbitrary code using a specially crafted link. Processing web content may lead to arbitrary code execution. **Recommendations** For macOS versions prior to Sonoma 14, update to macOS Sonoma 14 to resolve the issue. For Safari versions prior to 17, update to Safari 17 to resolve the issue. For iOS versions prior to 17, update to iOS 17 to resolve the issue. For iPadOS versions prior to 17, update to iPadOS 17 to resolve the issue.