CVE-2022-29104
CVSS 3.1 Score 7.8 of 10 (high)
Details
Summary
CVE-2022-29104 is a newly disclosed vulnerability affecting the Windows Print Spooler service. This elevation of privilege vulnerability allows an unauthenticated attacker to install and run malicious software on a target system, potentially leading to serious security consequences. The exploitation of this vulnerability could be achieved through remote means, making it particularly dangerous for organizations with exposed Print Spooler services. Microsoft has released a patch to address this issue, and it is strongly recommended that all affected systems be updated promptly to mitigate the risk. Failure to do so could result in unauthorized access and potential data breaches.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Microsoft Windows 7
- Microsoft Windows 10
- Microsoft Windows Server 2012
- Microsoft Windows 8.1
- Microsoft Windows Server 2016
Affected Vendors
- Microsoft