CVE-2020-10143

CVE-2020-10143 affects Macrium Reflect via an OpenSSL OPENSSLDIR of C:\openssl\ and a privileged service that loads OpenSSL. An unprivileged Windows user can create a crafted openssl.cnf path to achieve arbitrary code execution with SYSTEM privileges. Remediation available: upgrade to Macrium Ref...

CVE-2023-43896

The CVE-2023-43896 describes a buffer overflow in Macrium Reflect versions 8.1.7544 and earlier that can allow privilege escalation or arbitrary code execution. Affected product: Macrium Reflect (Windows backup utility). Root cause: a buffer overflow in the software/article components (no specifi...