Harmj0Y

**Name of the Vulnerable Software and Affected Versions** Microsoft Windows Local Security Authority (LSA) versions are affected, but specific versions are not provided in the input data. **Description** A spoofing issue allows attackers to affect the system. The problem is related to the Local Security Authority (LSA) in Windows. Details about real-world incidents where this issue was exploited are not provided. Technical details about exploitation include the use of `EfsRpcEncryptFileSrv` to bypass the latest MS patch. The issue can be exploited through RPC, and a named pipe, such as "lsarpc", can be used. The estimated number of potentially affected devices worldwide is not available. **Recommendations** No specific recommendations for resolving the issue are provided in the input data for each affected version.

**Name of the Vulnerable Software and Affected Versions** Active Directory (affected versions not specified) **Description** The issue is related to an elevation of privilege vulnerability in Active Directory Forest trusts. This vulnerability is due to a default setting that allows an attacker in the trusting forest to request delegation of a TGT for an identity from the trusted forest. The vulnerability is also described as being related to insufficient access restrictions in the Active Directory service of Windows operating systems, which can be exploited by a remote attacker to elevate their privileges. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.