CVE-2022-38028—Microsoft Windows Print Spooler Privilege Escalation Vulnerability

PUBLISHEDvulnerability record

2024-04-23 · last modified June 21, 2025

Metadata

CVE ID:: CVE-2022-38028
Project:: Microsoft
Product:: Windows
Date Added:: 2024-04-23
Due Date:: 2024-05-14
Last Updated:: June 21, 2025

Vulnerability Name

Microsoft Windows Print Spooler Privilege Escalation Vulnerability

Description

Microsoft Windows Print Spooler service contains a privilege escalation vulnerability. An attacker may modify a JavaScript constraints file and execute it with SYSTEM-level permissions.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:: Unknown

Action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.