CVE-2022-38028KEV · OVERDUE

Windows Print Spooler Elevation of Privilege Vulnerability

High · published October 11, 2022

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 7.8. It is confirmed in active exploitation. It sits in the 96.7th percentile for exploit probability.

893
days past CISA
deadline
CVSS v3.1
7.8
EPSS
15%
Percentile
96.7
In the wild
Confirmed
What it is

⚠️ A simple print job could give an attacker the keys to your kingdom! This Windows Print Spooler vulnerability allows elevation of privilege with minimal effort. 🔥 Think of it like an employee who gets access to the executive lounge just by submitting a few harmless-looking documents. Because the system doesn't verify their authority, they can wander around and access sensitive areas without anyone batting an eye. An attacker exploiting this vulnerability could gain elevated privileges, allowing them to install programs, view data, and even create new accounts—all while bypassing your security measures. The potential for data leaks and unauthorized actions is absolutely devastating!

Put simply

Think of it like an employee who gets access to the executive lounge just by submitting a few harmless-looking documents. Because the system doesn't verify their authority, they can wander around and access sensitive areas without anyone batting an eye. This Windows Print Spooler Elevation of Privilege Vulnerability allows attackers to execute arbitrary code with elevated privileges when they have access to a vulnerable server, effectively turning them into an admin without proper authorization.

What to do

An attacker exploiting this vulnerability could gain elevated privileges, allowing them to install programs, view data, and even create new accounts—all while bypassing your security measures. The potential for data leaks and unauthorized actions is absolutely devastating! Immediate action is necessary: ensure your Windows systems are updated to the latest patches available. Disable the Print Spooler service if it's not in use, and review user permissions carefully to restrict access. Don't wait—secure your systems! You've got this! Follow these steps to elevate your security game and keep those bad guys at bay! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.14949 · 96.7th percentile
Published
2022-10-11T00:00Z
KEV added
2024-04-23 · due 2024-05-14
EPSS history
Timeline
  • 23 APR 00:00Z
    Added to CISA KEV — remediate by May 14
    kev
  • 11 OCT 00:00Z
    Windows Print Spooler Elevation of Privilege Vulnerability
    cvelistv5