Xuefeng Li

**Name of the Vulnerable Software and Affected Versions** Windows Print Spooler (affected versions not specified) **Description** The issue is related to insufficient access restrictions in the Windows Print Spooler, which can be exploited to elevate privileges. This could allow an attacker to affect the system. No information is provided about the estimated number of potentially affected devices or real-world incidents. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Fax Service (affected versions not specified) **Description** The issue is related to insufficient access restrictions in the Windows Fax Service, which can be exploited to elevate privileges. This allows an attacker to affect the system. No information is provided about the estimated number of potentially affected devices or real-world incidents. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Digital Media Receiver (affected versions not specified) **Description** The issue is related to insufficient access restrictions in the Windows Digital Media Receiver component of Windows operating systems. Exploitation of this issue may allow an attacker to elevate their privileges. It is an elevation-of-privilege vulnerability that affects the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Print Spooler (affected versions not specified) **Description** The issue is related to insufficient access restrictions in the Windows Print Spooler, which can be exploited to elevate privileges. This could allow an attacker to affect the system. No information is provided about the estimated number of potentially affected devices or real-world incidents. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Fax Service (affected versions not specified) **Description** The issue is related to insufficient access restrictions in the Windows Fax Service, which can be exploited to elevate privileges. This allows an attacker to affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Print Spooler (affected versions not specified) **Description** The issue is related to insufficient access restrictions in the Windows Print Spooler. It allows an attacker to elevate their privileges, potentially affecting the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Fax Service (affected versions not specified) **Description** The issue is related to incorrect code generation management in the Windows Fax Service, which can be exploited by remote attackers to execute arbitrary code and affect the system. This can potentially allow an attacker to elevate their privileges. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Print Spooler (affected versions not specified) **Description** The issue is related to insufficient access restrictions in the Windows Print Spooler, which can be exploited to elevate privileges. This could allow an attacker to affect the system. No information is provided about the estimated number of potentially affected devices or real-world incidents. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Remote Access Connection Manager (affected versions not specified) **Description** The issue is related to an information disclosure vulnerability in the Windows Remote Access Connection Manager. It allows attackers to obtain sensitive information and potentially affect the system. Exploitation of this vulnerability may enable an attacker to gain unauthorized access to protected information. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Digital Media Receiver (affected versions not specified) **Description** The issue is related to synchronization errors when using a shared resource in the Windows Digital Media Receiver component of the Windows operating system. This can allow an attacker to elevate their privileges. The vulnerability enables attackers to affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Remote Access Connection Manager (affected versions not specified) **Description** The issue is related to insufficient access restrictions in the Windows Remote Access Connection Manager service, which can be exploited to elevate privileges. This allows an attacker to affect the system. No information is provided about the estimated number of potentially affected devices or real-world incidents where this issue was exploited. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Digital Media Receiver (affected versions not specified) **Description** The issue is related to insufficient access restrictions in the Windows Digital Media Receiver component of Windows operating systems. Exploitation of this issue may allow an attacker to elevate their privileges. It is an elevation-of-privilege vulnerability that enables attackers to affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Print Spooler versions prior to the fixed version **Description** The issue is related to errors in security settings, allowing an attacker to elevate their privileges. This can affect the system, potentially leading to further exploitation. The vulnerability has been exploited in real-world incidents, including ransomware attacks by groups such as LockBit 2.0. Industries affected include Telco, Retail, Financial, and Government, primarily in Cyprus and Russia. **Recommendations** For Windows Print Spooler, apply the official fix to resolve the issue. As a temporary workaround, consider restricting access to the Print Spooler service until the patch is applied. Avoid using vulnerable functions related to the Print Spooler until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Windows (affected versions not specified) **Description** The issue is related to the Microsoft Security Support Provider Interface (SSPI) in the Microsoft Windows operating system, which is associated with insecure privilege management. Exploitation of this issue may allow an attacker to elevate their privileges. It is an elevation-of-privilege issue that allows attackers to affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Cryptographic Services (affected versions not specified) **Description** The issue is related to insecure privilege management in Microsoft Cryptographic Services, which can be exploited to elevate privileges. This could allow an attacker to affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Digital Media Receiver (affected versions not specified) **Description** The issue is related to insecure privilege management in the Windows Digital Media Receiver component of the Windows operating system. Exploitation of this issue may allow an attacker to elevate their privileges. An elevation-of-privilege vulnerability allows attackers to affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Local Security Authority (LSA) Server (affected versions not specified) **Description** The issue is related to an information disclosure vulnerability in the Microsoft Local Security Authority Subsystem Service (LSASS) of the Microsoft Windows operating system. This vulnerability can be exploited by a remote attacker to disclose protected information. The vulnerability is associated with an error in the data area, which can lead to the exposure of sensitive information. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Remote Access Connection Manager (affected versions not specified) **Description** The issue is related to insecure privilege management in the Remote Access Connection Manager service of the Microsoft Windows operating system. It allows an attacker to elevate their privileges. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows (affected versions not specified) **Description** The issue is related to the Credential Security Support Provider Protocol (CredSSP) in the Windows operating system, specifically concerning insecure privilege management. This allows an attacker to potentially elevate their privileges. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Print Spooler (affected versions not specified) **Description** The issue is related to errors in the representation of information by the user interface of the Windows Print Spooler in Windows operating systems. This can allow a remote attacker to conduct spoofing attacks, potentially affecting the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.