CVE-2022-22718

Deeper analysis AI-assisted summary

Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.

CVE-2022-22718 is an elevation of privilege vulnerability in the Windows Print Spooler service. The flaw received a CVSS 3.1 base score of 7.8 and affects the print spooler component on supported Windows versions, allowing an attacker who can interact with the service to obtain higher privileges on the host.

A local attacker with low privileges can exploit the issue without user interaction to achieve full control over confidentiality, integrity, and availability on the affected system. Successful exploitation grants the ability to run arbitrary code with elevated rights, typically SYSTEM-level access.

Microsoft’s security update guide addresses the flaw through patches released in February 2022, while CISA lists the CVE in its Known Exploited Vulnerabilities catalog, confirming observed in-the-wild activity and requiring federal agencies to apply mitigations.

EPSS for the vulnerability rose from a low baseline to a peak of 0.4123 on 2023-04-08 before receding to the current value of 0.0772, indicating a clear post-disclosure increase in exploitation interest that warrants renewed attention.