CVE-2022-41073

An unpatched Windows Print Spooler flaw allowed attackers to escalate privileges to SYSTEM, directly enabling ransomware deployments.

The Windows Print Spooler vulnerability (CVE-2022-41073) allowed remote attackers to gain SYSTEM-level privileges without authentication, serving as a primary entry point for ransomware campaigns. DIB organizations must ensure this critical, actively exploited CVE is patched immediately to prevent privilege escalation and ransomware infections. Failure to patch exposes systems to remote code execution and severe compliance violations under NIST 800-171.

Shame score — This was a known, unpatched vulnerability actively exploited in the wild for ransomware, representing a severe negligence failure in patch management.