Exploits and TrickBot disrupt manufacturing operations

September 2021 saw a huge spike of exploit detections against the manufacturing industry, with a distributed spread between California, Florida, Ohio, and Missouri. This is combined with heavy detections of unseen malware, identified through our AI engine, spiking in May as well as September 2021...

The vulnerability of the Fast FAT File System Driver for the Windows operating system allows a hacker to gain increased privileges.

The vulnerability of the Fast FAT File System Driver for the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

CVE-2022-22043: Undefined Security Weakness

Windows Fast FAT File System Driver Elevation of Privilege Vulnerability...

CVE-2022-30220: Undefined Security Weakness

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

KLA12581 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to gain privileges, bypass security restrictions, obtain sensitive information, execute arbitrary code, cause denial of service. Below is a complete list of...

VulnCheck KEV: CVE-2021-43207

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

VulnCheck KEV: CVE-2021-43226

Microsoft Windows Common Log File System Driver contains a privilege escalation vulnerability that could allow a local, privileged attacker to bypass certain security mechanisms...

A crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array in NTFS-3G through 2021.8.22.

...

ALPINE-CVE-2022-30784

A crafted NTFS image can cause heap exhaustion in ntfsgetattributevalue in NTFS-3G through 2021.8.22...

DEBIAN-CVE-2022-30786

A crafted NTFS image can cause a heap-based buffer overflow in ntfsnamesfullcollate in NTFS-3G through 2021.8.22...

ntfs-3g: Heap buffer overflow in ntfs_inode_lookup_by_name()

The ntfs3g package is susceptible to a heap overflow on crafted input. When processing an NTFS image, proper bounds checking was not enforced leading to this software flaw. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

CVE-2022-24481

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2022-24521 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

CVE-2022-24481 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

CVE-2022-24521: Out-of-bounds Write

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2022-24481: Undefined Security Weakness

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

PT-2022-2922 · Microsoft · Windows Common Log File System Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Common Log File System CLFS Driver affected versions not specified Description: The issue is related to insecure privilege management in the Windows Common Log File System CLFS driver of the Microsoft Windows operating system...

PT-2022-2241

Name of the Vulnerable Software and Affected Versions Windows Common Log File System Driver affected versions not specified Description This issue is an elevation-of-privilege vulnerability affecting the Windows Common Log File System Driver. Successful exploitation could allow attackers to affec...