CVE-2022-35793

Deeper analysis

The vulnerability is an elevation of privilege flaw in the Windows Print Spooler component, assigned CVE-2022-35793 with a CVSS 3.1 score of 7.3. It affects Windows systems running the Print Spooler service and was publicly disclosed on 9 August 2022.

An attacker with local access and low privileges can exploit the issue when a user interacts with a malicious print job or related artifact. Successful exploitation grants the attacker the ability to execute code with elevated privileges, resulting in high impact to confidentiality, integrity, and availability on the affected system.

Microsoft's security update guide at the referenced MSRC links provides official patches and mitigation guidance for the vulnerability. Administrators are directed to apply the relevant updates through standard Windows servicing channels.

The EPSS score reached a peak of 0.0618 with a current value of 0.0502, indicating limited but non-zero post-disclosure interest without a pronounced upward trajectory.