Xuefeng Li

The issue is related to insufficient access restrictions in the Windows Print Spooler, which can be exploited to elevate privileges. This could allow an attacker to affect the system. No information is provided about the estimated number of potentially affected devices or real-world incidents.

The issue is related to insufficient access restrictions in the Windows Fax Service, which can be exploited to elevate privileges. This allows an attacker to affect the system. No information is provided about the estimated number of potentially affected devices or real-world incidents.

The issue is related to insufficient access restrictions in the Windows Digital Media Receiver component of Windows operating systems. Exploitation of this issue may allow an attacker to elevate their privileges. It is an elevation-of-privilege vulnerability that affects the system.

The issue is related to insufficient access restrictions in the Windows Print Spooler, which can be exploited to elevate privileges. This could allow an attacker to affect the system. No information is provided about the estimated number of potentially affected devices or real-world incidents.

The issue is related to insufficient access restrictions in the Windows Fax Service, which can be exploited to elevate privileges. This allows an attacker to affect the system.

The issue is related to insufficient access restrictions in the Windows Print Spooler. It allows an attacker to elevate their privileges, potentially affecting the system.

The issue is related to incorrect code generation management in the Windows Fax Service, which can be exploited by remote attackers to execute arbitrary code and affect the system. This can potentially allow an attacker to elevate their privileges.

The issue is related to insufficient access restrictions in the Windows Print Spooler, which can be exploited to elevate privileges. This could allow an attacker to affect the system. No information is provided about the estimated number of potentially affected devices or real-world incidents.

The issue is related to an information disclosure vulnerability in the Windows Remote Access Connection Manager. It allows attackers to obtain sensitive information and potentially affect the system. Exploitation of this vulnerability may enable an attacker to gain unauthorized access to protected information.

The issue is related to synchronization errors when using a shared resource in the Windows Digital Media Receiver component of the Windows operating system. This can allow an attacker to elevate their privileges. The vulnerability enables attackers to affect the system.

The issue is related to insufficient access restrictions in the Windows Remote Access Connection Manager service, which can be exploited to elevate privileges. This allows an attacker to affect the system. No information is provided about the estimated number of potentially affected devices or real-world incidents where this issue was exploited.

The issue is related to insufficient access restrictions in the Windows Digital Media Receiver component of Windows operating systems. Exploitation of this issue may allow an attacker to elevate their privileges. It is an elevation-of-privilege vulnerability that enables attackers to affect the system.

The issue is related to errors in security settings, allowing an attacker to elevate their privileges. This can affect the system, potentially leading to further exploitation. The vulnerability has been exploited in real-world incidents, including ransomware attacks by groups such as LockBit 2.0. Industries affected include Telco, Retail, Financial, and Government, primarily in Cyprus and Russia.

The issue is related to the Microsoft Security Support Provider Interface (SSPI) in the Microsoft Windows operating system, which is associated with insecure privilege management. Exploitation of this issue may allow an attacker to elevate their privileges. It is an elevation-of-privilege issue that allows attackers to affect the system.

The issue is related to insecure privilege management in Microsoft Cryptographic Services, which can be exploited to elevate privileges. This could allow an attacker to affect the system.

The issue is related to insecure privilege management in the Windows Digital Media Receiver component of the Windows operating system. Exploitation of this issue may allow an attacker to elevate their privileges. An elevation-of-privilege vulnerability allows attackers to affect the system.

The issue is related to an information disclosure vulnerability in the Microsoft Local Security Authority Subsystem Service (LSASS) of the Microsoft Windows operating system. This vulnerability can be exploited by a remote attacker to disclose protected information. The vulnerability is associated with an error in the data area, which can lead to the exposure of sensitive information.

The issue is related to insecure privilege management in the Remote Access Connection Manager service of the Microsoft Windows operating system. It allows an attacker to elevate their privileges.

The issue is related to the Credential Security Support Provider Protocol (CredSSP) in the Windows operating system, specifically concerning insecure privilege management. This allows an attacker to potentially elevate their privileges.

The issue is related to errors in the representation of information by the user interface of the Windows Print Spooler in Windows operating systems. This can allow a remote attacker to conduct spoofing attacks, potentially affecting the system.