Oliver Lyak

**Name of the Vulnerable Software and Affected Versions** Microsoft Windows Active Directory Domain Services (affected versions not specified) **Description** The issue is related to insufficient access restrictions in the Active Directory Domain Services of the Windows operating system. It allows a remote attacker to elevate their privileges. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Print Spooler (affected versions not specified) **Description** The issue is related to an information disclosure vulnerability in the Windows Print Spooler service. It is caused by incorrect restriction of the directory path name with limited access. Exploitation of this issue may allow an attacker to obtain unauthorized access to protected information. This vulnerability can be used by attackers to obtain sensitive information and affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Print Spooler versions prior to the fixed version **Description** The issue is related to errors in security settings, allowing an attacker to elevate their privileges. This can affect the system, potentially leading to further exploitation. The vulnerability has been exploited in real-world incidents, including ransomware attacks by groups such as LockBit 2.0. Industries affected include Telco, Retail, Financial, and Government, primarily in Cyprus and Russia. **Recommendations** For Windows Print Spooler, apply the official fix to resolve the issue. As a temporary workaround, consider restricting access to the Print Spooler service until the patch is applied. Avoid using vulnerable functions related to the Print Spooler until the issue is resolved.