High · published November 10, 2022
CVSS calls it high at 7.8. It is confirmed in active exploitation. It sits in the 83.6th percentile for exploit probability.
⚡ A sneaky elevation of privilege flaw hides in the Windows Print Spooler, letting attackers pull off some serious mischief! 🔥 Think of the Print Spooler as a busy post office. If an intruder can just waltz in and change the delivery addresses, they could reroute important packages to themselves without anyone batting an eye! An attacker could exploit this vulnerability to gain higher privileges on the system, potentially allowing them to install malicious software, modify data, or even create new user accounts. This could lead to a complete system compromise, impacting not only single machines but entire networks—definitely a recipe for chaos!
Think of the Print Spooler as a busy post office. If an intruder can just waltz in and change the delivery addresses, they could reroute important packages to themselves without anyone batting an eye! This vulnerability occurs in the way the Print Spooler service handles requests, allowing an unauthenticated user to execute arbitrary code with elevated privileges. If an attacker tricks the system into executing their malicious commands, it's game over!
An attacker could exploit this vulnerability to gain higher privileges on the system, potentially allowing them to install malicious software, modify data, or even create new user accounts. This could lead to a complete system compromise, impacting not only single machines but entire networks—definitely a recipe for chaos! To mitigate this issue, immediately disable the Print Spooler service if it's not needed, and apply the latest security updates from Microsoft to version 1.0.0 or above. Regularly audit your systems to ensure that print services are only running where absolutely necessary. You've got this! By taking these steps, you can keep your systems secure and maintain your security hero status! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| microsoft/windows_10_1507 | < 10.0.10240.19567 | 10.0.10240.19567 |
| microsoft/windows_10_1607 | < 10.0.14393.5501 | 10.0.14393.5501 |
| microsoft/windows_10_1809 | < 10.0.17763.3650 | 10.0.17763.3650 |
| microsoft/windows_10_20h2 | < 10.0.19042.2251 | 10.0.19042.2251 |
| microsoft/windows_10_21h1 | < 10.0.19043.2251 | 10.0.19043.2251 |
| microsoft/windows_10_21h2 | < 10.0.19044.2251 | 10.0.19044.2251 |
| microsoft/windows_10_22h2 | < 10.0.19045.2251 | 10.0.19045.2251 |
| microsoft/windows_11_21h2 | < 10.0.22000.1219 | 10.0.22000.1219 |
| microsoft/windows_11_22h2 | < 10.0.22621.819 | 10.0.22621.819 |
| microsoft/windows_7 | all versions | — |
| microsoft/windows_8.1 | all versions | — |
| microsoft/windows_8.1 | all versions | — |
| microsoft/windows_server_2008 | all versions | — |
| microsoft/windows_server_2008 | all versions | — |
| microsoft/windows_server_2012 | all versions | — |
| microsoft/windows_server_2012 | all versions | — |
| microsoft/windows_server_2016 | < 10.0.14393.5501 | 10.0.14393.5501 |
| microsoft/windows_server_2019 | < 10.0.17763.3650 | 10.0.17763.3650 |
| microsoft/windows_server_2022 | < 10.0.20348.1249 | 10.0.20348.1249 |