EXPOSURES › CVE-2022-21999
CVE-2022-21999
CRITICAL ⌖ ON CISA KEV · EXPLOITEDA Microsoft Windows Print Spooler vulnerability allowed privilege escalation and was actively exploited, likely contributing to ransomware attacks.
CVE-2022-21999 in the Windows Print Spooler enabled attackers to escalate privileges, potentially leading to system compromise and data exfiltration. DIB organizations using vulnerable Windows systems face increased risk of ransomware infection and non-compliance with NIST 800-171 controls; immediate patching is critical.
Shame score — The widespread exploitation of a critical privilege escalation vulnerability in a core Windows component demonstrates a significant security oversight with severe operational consequences.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
Microsoft Windows Print Spooler contains an unspecified vulnerability which can allow for privilege escalation.
| PRODUCT | STATUS |
|---|---|
| Azure Commercial Cloud Microsoft |
Authorized |
| Azure Government (includes Dynamics 365) Microsoft |
Authorized |
| Microsoft Office 365 GCC High Microsoft |
In Process |
| Office 365 Multi-Tenant & Supporting Services Microsoft |
Authorized |