Bryan De Houwer

**Name of the Vulnerable Software and Affected Versions** Windows NTLM versions prior to the fix included in CVE-2025-54918 **Description** An improper authentication issue exists within Windows NTLM. This flaw allows an authorized attacker to elevate privileges over a network. The vulnerability relates to deficiencies in the authentication procedure of the NTLM protocol. Exploitation may allow a remote attacker to elevate their privileges. The vulnerability allows for reflection of RPC to LDAPS from a standard user to a domain administrator. The issue was addressed by ensuring the Message Integrity Check (MIC) is always calculated, even if Type3 is empty. **Recommendations** Apply the fix included in CVE-2025-54918.

Name of the Vulnerable Software and Affected Versions: Windows Print Spooler (affected versions not specified) Description: The issue is related to insecure privilege management in the Windows Print Spooler component of Windows operating systems. Exploitation of this issue may allow an attacker to elevate their privileges. This can affect the system, potentially leading to increased access and control for the attacker. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Visual Studio (affected versions not specified) Windows Server 2019 (affected versions not specified) Windows Server 2016 (affected versions not specified) Windows 10 (affected versions not specified) Windows 10 Servers (affected versions not specified) **Description** The issue is related to insufficient access restrictions in the Diagnostics Hub Standard Collector Service of Microsoft Visual Studio on Windows operating systems. It allows an attacker to elevate their privileges by improperly impersonating certain file operations. **Recommendations** For Microsoft Visual Studio, update to a version that includes the fix for the Diagnostics Hub Standard Collector Service elevation of privilege issue. For Windows Server 2019, apply the necessary patch or update to resolve the elevation of privilege vulnerability in the Diagnostics Hub Standard Collector Service. For Windows Server 2016, apply the necessary patch or update to resolve the elevation of privilege vulnerability in the Diagnostics Hub Standard Collector Service. For Windows 10, apply the necessary patch or update to resolve the elevation of privilege vulnerability in the Diagnostics Hub Standard Collector Service. For Windows 10 Servers, apply the necessary patch or update to resolve the elevation of privilege vulnerability in the Diagnostics Hub Standard Collector Service.