CVE-2022-38028

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Oct 11, 2022
Updated: Jan 2, 2025

Summary

CVE-2022-38028 is a newly discovered vulnerability affecting Microsoft Windows Print Spooler service. This elevation of privilege vulnerability allows an attacker who has valid local access to a target system to gain administrative privileges. Exploitation of this issue could lead to serious consequences, such as unauthorized installation of malware or unintended modification of system settings. Microsoft has released a security update to address this vulnerability, and it is strongly recommended that users apply the patch as soon as possible to protect their systems. Failure to do so may leave systems vulnerable to attacks.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share