CVE-2022-41073VulnerabilityPublished 11/08/2022Updated 10/24/2026
CVE-2022-41073: Microsoft Windows Print Spooler Privilege Escalation Vulnerability
Affects Microsoft WindowsSource CISA KEV
Severity
HighNo CVSS score published yet
- Exploitation
Actively exploited – in CISA KEV since 11/08/2022
- KEV deadline
- 12/09/2022
- Ransomware
- Used in ransomware campaigns
- EPSS
- 2.4% chance of exploitation in 30 days – higher than 83% of CVEs
What to do
CISA required action
Apply updates per vendor instructions.
Description
Microsoft Windows Print Spooler contains an unspecified vulnerability that allows an attacker to gain SYSTEM-level privileges.