EXPOSURES › CVE-2022-22718
CVE-2022-22718
HIGH ⌖ ON CISA KEV · EXPLOITEDAn unpatched Windows Print Spooler privilege escalation vulnerability (CVE-2022-22718) was actively exploited in the wild, allowing attackers to escalate privileges on Windows systems.
This unpatched vulnerability in the Windows Print Spooler allowed attackers to escalate privileges, leading to potential system compromise. DIB organizations must ensure all Windows systems are patched promptly to prevent exploitation, as this vulnerability was actively exploited in the wild and is now listed in CISA's KEV catalog.
Shame score — The vulnerability was unpatched and actively exploited in the wild, causing significant exposure and requiring urgent patching across the enterprise.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
Microsoft Windows Print Spooler contains an unspecified vulnerability which allow for privilege escalation.
| PRODUCT | STATUS |
|---|---|
| Azure Commercial Cloud Microsoft |
Authorized |
| Azure Government (includes Dynamics 365) Microsoft |
Authorized |
| Microsoft Office 365 GCC High Microsoft |
In Process |
| Office 365 Multi-Tenant & Supporting Services Microsoft |
Authorized |