Yang Zhang

**Name of the Vulnerable Software and Affected Versions** Microsoft Windows (affected versions not specified) **Description** A tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLM MIC (Message Integrity Check) protection. This vulnerability allows attackers to affect the system. The issue is related to the NTLM MIC protection mechanism, which can be exploited by a remote attacker to downgrade the security features of the NTLM mechanism. The vulnerability can be used to relay NetNTLMv1 authentication to LDAP, and it has been exploited in real-world attacks, including the RBCD attack. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Linux kernel versions through 4.6.3 **Description** The issue concerns the mishandling of the APICv on/off state in the Linux kernel, allowing guest OS users to obtain direct APIC MSR access on the host OS. This can lead to a denial of service (host OS crash) or possibly execute arbitrary code on the host OS via x2APIC mode. **Recommendations** For Linux kernel versions through 4.6.3, update to a version later than 4.6.3 to resolve the issue. As a temporary workaround, consider disabling x2APIC mode until a patch is available. Restrict access to the APIC MSR to minimize the risk of exploitation.