7.8

CVE-2022-38028

Warning

Windows Print Spooler Elevation of Privilege Vulnerability

Data is provided by the National Vulnerability Database (NVD)
Microsoft ≫ Windows 10 1507 Version < 10.0.10240.19507
Microsoft ≫ Windows 10 1607 HwPlatformx64 Version < 10.0.14393.5427
Microsoft ≫ Windows 10 1607 HwPlatformx86 Version < 10.0.14393.5427
Microsoft ≫ Windows 10 1809 Version < 10.0.17763.3532
Microsoft ≫ Windows 10 20h2 HwPlatformarm64 Version < 10.0.19042.2130
Microsoft ≫ Windows 10 20h2 HwPlatformx86 Version < 10.0.19042.2130
Microsoft ≫ Windows 10 21h1 Version < 10.0.19043.2130
Microsoft ≫ Windows 10 21h2 Version < 10.0.19044.2130
Microsoft ≫ Windows 11 22h2 Version < 10.0.22621.674
Microsoft ≫ Windows 8.1 Version < 6.3.9600.20625
Microsoft ≫ Windows Rt 8.1 Version < 6.3.9600.20625
Microsoft ≫ Windows Server 2016 Version < 10.0.14393.5427
Microsoft ≫ Windows Server 2019 Version < 10.0.17763.3532
Microsoft ≫ Windows Server 2022 Version < 10.0.20348.1129

23.04.2024: CISA Known Exploited Vulnerabilities (KEV) Catalog

Microsoft Windows Print Spooler Privilege Escalation Vulnerability

Vulnerability

Microsoft Windows Print Spooler service contains a privilege escalation vulnerability. An attacker may modify a JavaScript constraints file and execute it with SYSTEM-level permissions.

Description

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Required actions
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 3.1% 0.863
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
secure@microsoft.com 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H