Microsoft Windows Privilege Escalation Vulnerability
Microsoft · Windows
Date added (CISA)
2022-05-23
Remediation due
2022-06-13
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Description
A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls. An attacker who successfully exploited the vulnerability could elevate privileges on an affected system from low-integrity to medium-integrity.