CVE-2022-23284
Published: 09 March 2022
Summary
CVE-2022-23284 is a high-severity an unspecified weakness vulnerability in Microsoft Windows 10. Its CVSS base score is 7.2 (High).
Operationally, ranked in the top 7.0% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
Windows Print Spooler contains an elevation of privilege vulnerability tracked as CVE-2022-23284. The flaw affects the print spooler component in Windows and carries a CVSS 3.1 base score of 7.2 with a network attack vector, low attack complexity, and high-privileged requirements, resulting in high impact to confidentiality, integrity, and availability.
An authenticated attacker already holding high privileges can exploit the issue remotely without user interaction to elevate rights and obtain full control over the affected system. The vulnerability therefore allows a privileged network attacker to expand access beyond the initial account level.
Microsoft security advisories referenced at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-23284 describe available updates and mitigation guidance for the Print Spooler component. The associated EPSS score has remained flat at a peak of 0.0951 with no material increase after disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-28370
Vulnerability details
Windows Print Spooler Elevation of Privilege Vulnerability
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.