coldbraid

CVE-2022-38028 Microsoft Windows

Microsoft Windows Print Spooler service contains a privilege escalation vulnerability. An attacker may modify a JavaScript constraints file and execute it with SYSTEM-level permissions.

CVSS
not scored

On CISA’s exploited list

Microsoft Windows Print Spooler Privilege Escalation Vulnerability

Added
2024-04-23
Federal patch deadline
2024-05-14
Ransomware use
not known

Actors known to use it (MITRE ATT&CK)