Oliver Lyak

The issue is related to insufficient access restrictions in the Active Directory Domain Services of the Windows operating system. It allows a remote attacker to elevate their privileges.

The issue is related to an information disclosure vulnerability in the Windows Print Spooler service. It is caused by incorrect restriction of the directory path name with limited access. Exploitation of this issue may allow an attacker to obtain unauthorized access to protected information. This vulnerability can be used by attackers to obtain sensitive information and affect the system.

The issue is related to errors in security settings, allowing an attacker to elevate their privileges. This can affect the system, potentially leading to further exploitation. The vulnerability has been exploited in real-world incidents, including ransomware attacks by groups such as LockBit 2.0. Industries affected include Telco, Retail, Financial, and Government, primarily in Cyprus and Russia.