CVE-2022-21999

This repository contains a functional exploit for CVE-2022-21999, a Windows Print Spooler Elevation of Privilege vulnerability. The exploit leverages a DLL to create a new local administrator account and add it to the administrators group.

This Metasploit module exploits CVE-2022-21999 (SpoolFool) to achieve local privilege escalation by manipulating the Windows Print Spooler's SpoolDirectory configuration via SetPrinterDataEx, leading to arbitrary DLL loading and SYSTEM-level code execution.