CVE-2022-38028: high-severity vulnerability in Microsoft Windows 10 Version 1507
Windows Print Spooler Elevation of Privilege Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA and 1 threat group(s) use it.
Groups known to exploit this vulnerability (MITRE ATT&CK attribution).
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
A flaw in Windows Print Spooler allows a local attacker to gain higher privileges on the system. An attacker who already has basic access to a computer can exploit this to run malicious code with administrator rights.
A privilege escalation vulnerability exists in the Windows Print Spooler service that allows a local, authenticated attacker to elevate privileges to SYSTEM level. The vulnerability requires prior local access and can be exploited through specially crafted print-related requests to the spooler service.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.