Or Yair

Name of the Vulnerable Software and Affected Versions: Windows Print Spooler Components (affected versions not specified) Description: An uncontrolled resource consumption issue in Windows Print Spooler Components can allow an attacker to cause a denial of service. Exploitation may allow a remote attacker to cause a system outage. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows Netlogon (affected versions not specified) Description: An uncontrolled resource consumption issue in Windows Netlogon can allow an unauthorized attacker to cause a denial of service over a network. This denial-of-service vulnerability allows attackers to affect the system. The vulnerability is related to uncontrolled resource usage. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

An uncontrolled resource consumption issue in the Windows Local Security Authority Subsystem Service (LSASS) can allow an unauthorized attacker to cause a denial of service over a network. This issue enables attackers to disrupt system functionality. Reports indicate that the vulnerability, identified as CVE-2025-32724, is being exploited by 'win-dDoS' to compromise domain controllers and use them as DDoS botnet participants, potentially affecting up to 10,000 domain controllers. The exploitation leverages LDAP referrals and does not require credentials.

The issue is related to an elevation-of-privilege vulnerability in Windows Storage Services, which is caused by incorrect handling of symbolic links before accessing a file. This could allow an attacker to elevate their privileges.

The issue allows attackers to make Process Explorer functionally unavailable, resulting in a denial of service for analysis. This can be achieved by renaming an executable file to a new extensionless 255-character name and launching it with `NtCreateUserProcess`. The problem stems from an issue in `wcscat s` error handling.

The issue is related to the Volume Shadow Copy Service (VSS) in Windows operating systems and is caused by inadequate access restrictions. This can allow an attacker to elevate their privileges. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited.

The issue is related to insecure privilege management within the malware removal functionality of Avast and AVG Antivirus. An attacker with write access to the filesystem can exploit this to escalate their privileges in certain scenarios.

The issue is related to a Privilege Escalation vulnerability, which allows an attacker to gain elevated access to resources that are normally protected from an application or user. This vulnerability is associated with insufficient access control. The estimated severity of this issue is significant, as it can be exploited to develop attacks and elevate privileges in the system.

The issue is related to a heap corruption vulnerability in the aswjsflt.dll library of Avast Antivirus, which could allow an attacker to bypass the sandbox of the application it was loaded into. This vulnerability is associated with a buffer overflow in memory when loading the aswjsflt.dll library.