Decoder_It

A use after free issue exists in Windows Print Spooler Components. This allows an authorized attacker to execute code over a network.

Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network. An authenticated low-privileged user can gain the rights of the account running the Windows Admin Center service. Because Windows Admin Center serves as a centralized control plane for managing servers, clusters, and Active Directory-joined systems, this flaw could potentially lead to full domain compromise under certain conditions.

Name of the Vulnerable Software and Affected Versions Windows versions (affected versions not specified) Description A flaw in Windows HTTP.sys related to improper access control can allow an authorized attacker to elevate privileges over a network. This issue can be exploited remotely. The vulnerability enables Kerberos authentication relay to Active Directory Certificate Services (AD CS) via DNS CNAME abuse, bypassing NTLM protections. A proof-of-concept (PoC) has been released demonstrating how attackers can manipulate DNS CNAME resolution to coerce Windows clients into requesting Kerberos tickets for attacker-controlled Service Principal Names (SPNs), enabling credential relay and lateral movement. This poses a risk to Active Directory networks, even when NTLM is disabled. Mitigation means removing relay opportunities at the service layer. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is related to insufficient access restrictions in the Windows Group Policy service, which can be exploited to elevate privileges. This allows an attacker to affect the system. No information is available on the estimated number of potentially affected devices or real-world incidents.

The issue is related to insufficient access restrictions in the Windows Group Policy service, allowing a remote attacker to elevate their privileges.

The issue is related to insufficient access restrictions in the Windows Group Policy Preference Client component of the Windows operating system. Exploitation of this issue may allow an attacker to elevate privileges in the system. It is an elevation-of-privilege issue that can affect the system.

The issue is related to insufficient access restrictions in the Windows Group Policy Preference Client component of the Windows operating system. Exploitation of this issue may allow an attacker to elevate their privileges. It is an elevation-of-privilege issue that can affect the system.

The issue is related to an elevation-of-privilege vulnerability that allows attackers to affect the system. It is caused by improper link resolution before file access. Exploitation of this issue may allow an attacker to elevate privileges in the system using a specially crafted link.

The issue allows a user to gain access to protected parts of the file system due to inadequate permissions logic.