RaqibCTI
CVE

CVE-2022-38028

P2
Microsoft Windows Print Spooler Privilege Escalation Vulnerability
Microsoft · Windows
Date added (CISA)
2024-04-23
Remediation due
2024-05-14
Known ransomware use
Not indicated
Remediation priority
P2past CISA due date

Description

Microsoft Windows Print Spooler service contains a privilege escalation vulnerability. An attacker may modify a JavaScript constraints file and execute it with SYSTEM-level permissions.

Source: NVD ↗ · CISA KEV Catalog ↗