Windows LSA Spoofing Vulnerability

How could an attacker exploit this vulnerability?
An unauthenticated attacker could call a method on the LSARPC interface and coerce the domain controller to authenticate against another server using NTLM. This security update blocks the affected API calls OpenEncryptedFileRawA and OpenEncryptedFileRawW through LSARPC interface.
Yes. Please see ADV210003 Mitigating NTLM Relay Attacks on Active Directory Certificate Services (AD CS).
Yes. Please see KB5005413 for more information on the steps that you need to take to protect your system. Please note that the combined CVSS score would be 9.8 when this vulnerability is chained with the noted NTLM Relay Attacks on Active Directory Certificate Services (AD CS).
Yes. This vulnerability affects all servers but domain controllers should be prioritized in terms of applying security updates.
The EFS API OpenEncryptedFileRaw(A/W), often used in backup software, continues to work in all versions of Windows (local and remote), except when backing up to or from a system running Windows Server 2008 SP2. OpenEncryptedFileRaw will no longer work on Windows Server 2008 SP2.

Security updates
10.0.17763.2114 — https://support.microsoft.com/help/5005030
10.0.19041.1165 — https://support.microsoft.com/help/5005033
10.0.14393.4583 — https://support.microsoft.com/help/5005043
6.0.6003.21192 — https://support.microsoft.com/help/5005090
6.0.6003.21192 — https://support.microsoft.com/help/5005095
6.1.7601.25685 — https://support.microsoft.com/help/5005088
6.1.7601.25685 — https://support.microsoft.com/help/5005089
6.2.9200.23435 — https://support.microsoft.com/help/5005099
6.2.9200.23435 — https://support.microsoft.com/help/5005094
6.3.9600.20094 — https://support.microsoft.com/help/5005076
6.3.9600.20094 — https://support.microsoft.com/help/5005106