Forwarded from TWCERTCC Security Advisory TWCERTCC-200-202605-00000014

【CVE-2008-4250】Microsoft Windows Buffer Overflow Vulnerability (CVSS v3.1: 9.8)
【Whether exploited by ransomware: Unknown】 A buffer overflow vulnerability exists in Windows Server Service of Microsoft Windows. A remote attacker may trigger a buffer overflow during the path canonicalization process through a specially crafted RPC request, thereby executing arbitrary code.

【CVE-2009-1537】Microsoft DirectX NULL Byte Overwrite Vulnerability (CVSS v3.1: 8.8)
【Whether exploited by ransomware: Unknown】 A NULL byte overwrite vulnerability exists in the QuickTime Movie Parser Filter within the DirectShow component quartz.dll of Microsoft DirectX. A remote attacker may trigger this vulnerability through a specially crafted QuickTime media file, thereby executing arbitrary code.

【CVE-2009-3459】Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability (CVSS v3.1: 8.8)
【Whether exploited by ransomware: Unknown】 Adobe Acrobat and Reader have a heap-based buffer overflow vulnerability. A remote attacker may trigger memory corruption through a specially crafted PDF file, thereby executing arbitrary code.

【CVE-2010-0249】Microsoft Internet Explorer Use-After-Free Vulnerability (CVSS v3.1: 8.8)
【Whether exploited by ransomware: Unknown】 Microsoft Internet Explorer has a use-after-free memory vulnerability. A remote attacker may execute arbitrary code by accessing a pointer associated with a deleted object.

【CVE-2010-0806】Microsoft Internet Explorer Use-After-Free Vulnerability (CVSS v3.1: 8.8)
【Whether exploited by ransomware: Unknown】 Microsoft Internet Explorer has a use-after-free memory vulnerability. A remote attacker may exploit this vulnerability by accessing an invalid pointer after an object is deleted, thereby executing arbitrary code.

【CVE-2026-41091】Microsoft Defender Link Following Vulnerability (CVSS v3.1: 7.8)
【Whether exploited by ransomware: Unknown】 Microsoft Defender has a link following vulnerability, which allows an authorized attacker to elevate privileges locally.

【CVE-2026-45498】Microsoft Defender Denial of Service Vulnerability (CVSS v3.1: 4.0)
【Whether exploited by ransomware: Unknown】 Microsoft Defender has an unspecified vulnerability, which may result in denial of service.

【CVE-2025-34291】Langflow Origin Validation Error Vulnerability (CVSS v3.1: 8.8)
【Whether exploited by ransomware: Unknown】 Langflow has an origin validation error vulnerability. Due to its overly permissive CORS configuration, and because the refresh token cookie is set to SameSite=None, an attacker may use this to access endpoints that require authentication, thereby executing arbitrary code and ultimately obtaining full control of the system.

【CVE-2026-34926】Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability (CVSS v3.1: 6.7)
【Whether exploited by ransomware: Unknown】 Trend Micro Apex One (on-premise) has a directory traversal vulnerability, which may allow a pre-authenticated local attacker to modify critical data tables on the server, thereby injecting malicious code and delivering it to managed endpoint devices.

【CVE-2026-9082】Drupal Core SQL Injection Vulnerability (CVSS v3.1: 9.8)
【Whether exploited by ransomware: Unknown】 Drupal Core has an SQL injection vulnerability. An attacker may send specially crafted requests through the database abstraction API, thereby achieving privilege escalation and remote code execution.

Information Sharing Level: WHITE (the intelligence content is information that may be publicly disclosed)