Yanir Tsarimi

**Name of the Vulnerable Software and Affected Versions** Microsoft Word for Android (affected versions not specified) Microsoft Excel for Android (affected versions not specified) **Description** Improper access control in Office for Android allows an unauthorized attacker to perform spoofing locally. Spoofing is a technique where a person or program successfully masquerades as another by falsifying data, in order to gain an illegitimate advantage. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Planetary Computer Pro (affected versions not specified) **Description** Deserialization of untrusted data allows an unauthorized attacker to disclose information over a network. Deserialization is the process of converting a data stream back into an object, which can be exploited if the input is not properly validated. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Azure SRE Agent (affected versions not specified) **Description** Improper authentication in the Azure SRE Agent allows an unauthorized attacker to disclose information over a network. A multi-tenant design oversight occurred where authentication checks validated tokens without ensuring the caller was authorized for the target tenant. This gap allowed individuals from different Entra ID tenants to silently eavesdrop on real-time command streams, AI chat streams, internal LLM reasoning, tool calls, and sensitive credentials. This issue specifically affected the Azure SRE Agent Gateway - SignalR Hub. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Azure (affected versions not specified) Description: The issue is related to improper limitation of a pathname to a restricted directory, also known as 'path traversal', which allows an unauthorized attacker to elevate privileges over a network. This can lead to unauthorized privilege elevation via path traversal due to improper pathname limitations. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Azure (affected versions not specified) **Description** The issue is related to improper authorization in Azure, which allows an authorized attacker to elevate privileges over a network. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Azure Science Virtual Machine (DSVM) (affected versions not specified) **Description** The issue is related to an elevation of privilege vulnerability. No further details are provided about the nature of the issue, affected devices, or real-world incidents. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Clair versions (affected versions not specified) **Description** A directory traversal issue in the ClairCore engine allows an attacker to exploit the system by providing a crafted container image. When scanned by Clair, this can lead to arbitrary file write on the filesystem, potentially enabling remote code execution. Additionally, a maliciously crafted RPM file can cause the `Scanner.Scan` function to write files with arbitrary contents to arbitrary locations on the local filesystem. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.