Security researchers from SentinelOne have identified vulnerabilities within the Eltima SDK third-party desktop virtualization driver software supporting cloud-based infrastructure platforms like Amazon Workspaces, Accops, and NoMachine. The flaws exist in the “USB over Ethernet,” functionality, and cause a buffer overflow which could allow the attacker to execute arbitrary code, allowing them to escalate their local privileges to kernel. The specific drivers in question are “wspvuhub.sys” and “wspusbfilter.sys”, and Eltima has patched these flaws in Amazon Nimble Studio AMI, Amazon NICE DCV, Amazon WorkSpaces, Amazon AppStream, NoMachine, Accops HyWorks, Accops HyWorks DVM Tools, Eltima USB Network Gate, Amzetta zPortal Windows zClient, Amzetta zPortal DVM Tools, FlexiHub, and Donglify. Users of these platforms are urged to update to the latest secure version immediately. The Ankura CTAPT will continue to provide our readers with the latest information on known and exploited warranties.