CVE-2022-30206

Deeper analysis

The vulnerability is an elevation of privilege flaw in the Windows Print Spooler component, assigned CVE-2022-30206 with a CVSS 3.1 score of 7.8. It affects Windows systems running the Print Spooler service and permits an attacker to gain unauthorized higher-level access on the host.

A local attacker with low privileges can exploit the issue without user interaction due to the low attack complexity and local attack vector. Successful exploitation grants full control over confidentiality, integrity, and availability on the affected system, allowing the attacker to escalate from a standard user context to SYSTEM-level privileges.

Microsoft has published guidance for the vulnerability through its security update guide at the referenced URL, directing administrators to apply the corresponding patches. The EPSS score has remained near 0.26 with a peak of 0.2643 and shows no material post-disclosure rise that would indicate emerging exploitation interest.