CVE-2022-29132
CVSS 2.0 Score 7.2 of 10 (high)
Details
Summary
CVE-2022-29132 is a newly disclosed vulnerability affecting the Windows Print Spooler service. This elevation of privilege vulnerability allows an unauthenticated attacker to execute arbitrary code on a targeted system, potentially leading to serious security consequences. An attacker could exploit this vulnerability through remote means, requiring no user interaction. Exploitation typically involves sending a specially crafted print job to the target system. Microsoft has released a security update to address this issue, and it is strongly recommended that all affected systems be promptly patched.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Microsoft Windows Server 2008
- Microsoft Windows 7
- Microsoft Windows 10
- Microsoft Windows 8.1
- Microsoft Windows Server 2012
Affected Vendors
- Microsoft