CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Windows Print Spooler Privilege Escalation Vulnerability (CVE-2022-41073) Security Advisory
[Affected Scope] Windows 7, 8.1, 10, 11 and Windows Server 2008, 2012, 2016, 2019, 2022 with the Print Spooler service enabled
[Impact] A local authenticated attacker can exploit this vulnerability to execute arbitrary code with SYSTEM privileges, leading to complete system compromise
[Mitigation] Apply the official Microsoft cumulative security updates immediately, or disable the Print Spooler service on non-printing server infrastructures
Windows Print Spooler Elevation of Privilege Vulnerability (CVE-2022-38028) Security Advisory
[Affected Scope] Windows 7, 8.1, 10, 11 and Windows Server 2008, 2012, 2016, 2019, 2022 with active Print Spooler service
[Impact] Local authenticated attackers can execute arbitrary code with SYSTEM privileges, leading to complete system compromise
[Mitigation] Apply the official Microsoft cumulative security updates immediately, or disable the Print Spooler service on non-printing servers
Windows Print Spooler Elevation of Privilege Vulnerability (CVE-2022-22718) Security Advisory
[Affected Scope] Windows and Windows Server operating systems running the Windows Print Spooler service
[Impact] A locally authenticated attacker can exploit this vulnerability to execute arbitrary code with SYSTEM privileges, leading to complete system compromise
[Mitigation] Apply the official Microsoft cumulative security updates immediately, or disable the Print Spooler service on non-printing servers
Windows Print Spooler Elevation of Privilege Vulnerability (CVE-2022-21999) Technical Advisory
[Affected Scope] Windows 7, 8.1, 10, 11 and Windows Server 2008, 2012, 2016, 2019, 2022 with active Print Spooler service
[Impact] Local attackers can exploit directory traversal and symbolic link creation to execute arbitrary code with SYSTEM privileges, leading to full host compromise
[Mitigation] Apply the official Microsoft security updates immediately, or disable the Print Spooler service on non-printing servers and Domain Controllers
Microsoft Windows Print Spooler Remote Code Execution Vulnerability (PrintNightmare, CVE-2021-34527) Technical Advisory
[Affected Scope] Windows 7, 8.1, 10, 11 and Windows Server 2008, 2012, 2016, 2019, 2022 with the Windows Print Spooler service enabled
[Impact] An authenticated remote attacker can execute arbitrary code with SYSTEM privileges, potentially leading to full domain compromise
[Mitigation] Apply official cumulative security updates immediately, disable the Print Spooler service where not required, and harden Point and Print registry configurations
Windows Print Spooler Remote Code Execution and Privilege Escalation Vulnerability (PrintNightmare - CVE-2021-1675)
[Affected Scope] All Windows and Windows Server operating systems with the Windows Print Spooler (spoolsv.exe) service enabled
[Impact] Authenticated local or remote attackers can execute arbitrary code with SYSTEM privileges, potentially leading to full Domain Controller compromise
[Mitigation] Apply official Microsoft security patches immediately, or disable the Print Spooler service and block remote printing via Group Policy