CVE-2022-38028

Deeper analysis AI-assisted summary

Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.

Windows Print Spooler Elevation of Privilege Vulnerability CVE-2022-38028 affects the Windows Print Spooler component and carries a CVSS 3.1 score of 7.8. The flaw permits an attacker to elevate privileges on an affected system through local access with low attack complexity and no user interaction required.

An authenticated local user with low privileges can exploit the vulnerability to obtain high impact on confidentiality, integrity, and availability, effectively allowing elevation to higher privilege levels on the host. Exploitation requires only local access and does not depend on network adjacency or additional user actions.

Microsoft security advisories at the listed MSRC URLs direct administrators to apply the patches released for the vulnerability. The presence of the CVE in CISA’s Known Exploited Vulnerabilities catalog confirms that in-the-wild exploitation has occurred, and the EPSS score rose from a low baseline to a peak of 0.0676 on 2025-12-11 before receding to the current value of 0.0391, indicating that exploitation interest increased after disclosure.