CVE-2022-22718

Summary dbcve.org

This is a local privilege escalation vulnerability in the Windows Print Spooler service that allows an authenticated low-privileged attacker to gain SYSTEM-level code execution on the affected machine. The vulnerability stems from improper access control handling within the Print Spooler component.

Mitigation

Apply the Microsoft security update (KB5008212 or subsequent) to all affected Windows systems. If immediate patching is not feasible, consider disabling the Print Spooler service on systems that do not require printing functionality as a temporary mitigation.