Lxf02942370

**Name of the Vulnerable Software and Affected Versions** Windows Digital Media Receiver (affected versions not specified) **Description** The issue is related to insufficient access restrictions in the Windows Digital Media Receiver component of Windows operating systems. Exploitation of this issue may allow an attacker to elevate their privileges. It is an elevation-of-privilege vulnerability that affects the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Remote Access Connection Manager (affected versions not specified) **Description** The issue is related to insufficient access restrictions in the Windows Remote Access Connection Manager service, which can be exploited to elevate privileges. This allows an attacker to affect the system. No information is provided about the estimated number of potentially affected devices or real-world incidents where this issue was exploited. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Digital Media Receiver (affected versions not specified) **Description** The issue is related to synchronization errors when using a shared resource in the Windows Digital Media Receiver component of the Windows operating system. This can allow an attacker to elevate their privileges. The vulnerability enables attackers to affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Print Spooler versions prior to the fixed version **Description** The issue is related to errors in security settings, allowing an attacker to elevate their privileges. This can affect the system, potentially leading to further exploitation. The vulnerability has been exploited in real-world incidents, including ransomware attacks by groups such as LockBit 2.0. Industries affected include Telco, Retail, Financial, and Government, primarily in Cyprus and Russia. **Recommendations** For Windows Print Spooler, apply the official fix to resolve the issue. As a temporary workaround, consider restricting access to the Print Spooler service until the patch is applied. Avoid using vulnerable functions related to the Print Spooler until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Microsoft Local Security Authority (LSA) Server (affected versions not specified) **Description** The issue is related to an information disclosure vulnerability in the Microsoft Local Security Authority Subsystem Service (LSASS) of the Microsoft Windows operating system. This vulnerability can be exploited by a remote attacker to disclose protected information. The vulnerability is associated with an error in the data area, which can lead to the exposure of sensitive information. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Windows Print Spooler (affected versions not specified) **Description** The Windows Print Spooler service contains a flaw in how it handles file operations, potentially allowing a remote attacker to execute arbitrary code with SYSTEM privileges. This issue, also known as PrintNightmare, has been actively exploited. Reports indicate that attackers have leveraged this vulnerability to deploy ransomware within networks. The vulnerability is related to improper access control restrictions. While the initial exploitation may require some level of prior access, the vulnerability allows for significant system compromise. The vulnerability affects systems even after applying previous fixes, highlighting the need for continued vigilance. Tools have been developed to scan for vulnerable systems and to help mitigate the exploit, including scripts to restrict Point and Print and Remote Print functionality, and validation for User Account Control (UAC) being enabled. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows (affected versions not specified) Description: The issue is related to an elevation of privilege vulnerability. It is associated with errors in managing privileges. Exploitation of this vulnerability could allow an attacker to elevate their privileges. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Speech Runtime (affected versions not specified) **Description** The issue is related to errors in privilege management within the Windows Speech Runtime component of Microsoft Windows operating systems. This can allow an attacker to elevate their privileges. The vulnerability may be exploited to affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows Speech Runtime (affected versions not specified) Description: The issue is related to errors in privilege management within the Windows Speech Runtime component of Microsoft Windows operating systems. This can allow an attacker to elevate their privileges. The vulnerability may be exploited to affect the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Projected File System (affected versions not specified) **Description** The issue is related to insecure privilege management in the Windows Projected File System component, allowing an attacker to elevate their privileges. This can impact the system, but specific details about the number of potentially affected devices or real-world incidents are not provided. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows WalletService (affected versions not specified) **Description** The issue is related to insecure privilege management in the WalletService component of the Windows operating system. It allows an attacker to elevate their privileges, potentially affecting the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows ActiveX Installer Service (affected versions not specified) **Description** The issue is related to insecure privilege management in the Windows ActiveX Installer Service component. It allows an attacker to elevate their privileges. The vulnerability can be exploited to obtain sensitive information and affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows WalletService (affected versions not specified) Description: The issue is related to insecure privilege management in the WalletService of Windows operating systems. It allows an attacker to elevate their privileges, affecting the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows Fax Service (affected versions not specified) Description: The issue allows remote attackers to execute arbitrary code and affect the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows Fax Service (affected versions not specified) Description: The issue is related to a remote code execution vulnerability in the Windows Fax Service, which is associated with privilege management errors. This allows a remote attacker to execute arbitrary code on the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows (affected versions not specified) **Description** The issue is related to a lack of protection for service data in the Windows Local Print Spooler Service. This allows a remote attacker to execute arbitrary code on the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows (affected versions not specified) **Description** The issue is related to errors in privilege management in the Active Template Library of the Windows operating system. It allows an attacker to potentially elevate their privileges, affecting the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Runtime C++ Template Library (affected versions not specified) **Description** The issue is related to unsafe privilege management in the Windows Runtime C++ Template Library, which can be exploited to elevate privileges and execute arbitrary code. It allows attackers to affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Diagnostics Hub Standard Collector (affected versions not specified) Description: The issue is related to insufficient access restrictions in the Diagnostics Hub Standard Collector service, which is part of the Visual Studio software. This can allow an attacker to elevate their privileges. The vulnerability may be exploited to affect the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows USO Core Worker (affected versions not specified) **Description** The issue is related to insufficient access restrictions to certain functions in the Windows USO Core Worker component, allowing an attacker to potentially elevate their privileges. This can affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.