Winslow1984

**Name of the Vulnerable Software and Affected Versions** MiniTool Partition Wizard versions prior to 13.9 **Description** An issue exists in the Signed Kernel Driver component within the `pwdrvio.sys` library. A weakness in an unknown function leads to improper access controls, which can be exploited by a local attacker. **Recommendations** Upgrade to version 13.9.

**Name of the Vulnerable Software and Affected Versions** QILING Disk Master version 6.0.0.0 **Description** An issue exists in the Kernel Driver component within the `diskbckp.sys` library. An unknown function in this library allows for improper access controls, which can be exploited by a local attacker. **Recommendations** Upgrade QILING Disk Master version 6.0.0.0 to a newer version.

**Name of the Vulnerable Software and Affected Versions** AOMEI Backupper versions prior to 8.3.0 **Description** An issue exists in the Kernel Driver component within the `amwrtdrv.sys` library. A local attacker can perform a manipulation of an unknown function to cause improper access controls. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** EaseUS Partition Master versions prior to 14.6 **Description** An issue exists in the Kernel Driver component within the `epmntdrv.sys` library. A local attacker can manipulate an unknown function in this library to cause improper access controls. **Recommendations** Upgrade the affected component to the latest version.

**Name of the Vulnerable Software and Affected Versions** EaseUS Partition Master versions prior to 14.6 **Description** A security flaw exists in the Kernel Driver component within the `EUEDKEPM.sys` library. An unknown function in this library allows for improper access controls, which can be exploited by a local attacker. **Recommendations** Upgrade to the latest version of the software to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** IM-Magic Partition Resizer versions prior to 7.9.0 **Description** Improper access controls in the Kernel Driver component, specifically within the `MDA NTDRV.sys` library, allow for local privilege escalation. This issue occurs when a local attacker manipulates an unknown function within the library to bypass security restrictions. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Ezbsystems UltraISO Premium Edition versions prior to 9.77 **Description** Improper access controls exist within the Kernel Driver component, specifically affecting the `bootpt64.sys` library. This issue allows for unauthorized access when manipulated by a user with local access to the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** AOMEI Partition Assistant versions prior to 10.10.2 **Description** Improper access controls exist within the Kernel Driver component, specifically affecting unknown code in the `ampa10.sys` library. This issue allows a local attacker to manipulate the system to bypass access restrictions. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** AOMEI Dynamic Disk Manager versions prior to 10.10.2 **Description** An issue exists in the Kernel Driver component within the `ddmdrv.sys` library. Improper access controls can be triggered through specific manipulations, allowing a local attacker to gain unauthorized access. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** DVDFab Virtual Drive version 2.0.0.5 **Description** Improper privilege management exists within the Signed Kernel Driver component, specifically affecting a function in the `dvdfabio.sys` library. This issue allows a local attacker to manipulate the system to gain unauthorized privileges. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: AppHouseKitchen AlDente Charge Limiter versions up to 1.29 Description: A critical issue has been found in AppHouseKitchen AlDente Charge Limiter, affecting the `shouldAcceptNewConnection` function of the `com.apphousekitchen.aldente-pro.helper` file in the XPC Service component. This leads to improper authorization, allowing an attack to be launched on the local host. Recommendations: For AppHouseKitchen AlDente Charge Limiter versions up to 1.29, upgrade to version 1.30 to address this issue. As a temporary workaround, consider disabling the `shouldAcceptNewConnection` function until the update is applied. Restrict access to the XPC Service component to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** exelban stats versions up to 2.11.21 **Description** A critical issue has been found in the `shouldAcceptNewConnection` function of the XPC Service component, leading to command injection. This issue can be exploited locally. **Recommendations** For versions up to 2.11.21, upgrade to version 2.11.22 to address this issue. As a temporary workaround, consider disabling the `shouldAcceptNewConnection` function until a patch is available.

**Name of the Vulnerable Software and Affected Versions** X1a0He Adobe Downloader version 1.3.1 and earlier **Description** A critical vulnerability was found in the X1a0He Adobe Downloader, affecting the `shouldAcceptNewConnection` function of the `com.x1a0he.macOS.Adobe-Downloader.helper` file in the XPC Service component. This leads to improper privilege management. The exploit has been disclosed to the public and may be used, requiring a local approach to attack. It is noted that this product is not affiliated with the company Adobe. **Recommendations** For X1a0He Adobe Downloader version 1.3.1 and earlier, as a temporary workaround, consider disabling the `shouldAcceptNewConnection` function until a patch is available. Restrict access to the XPC Service component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.