CVE-2022-22718

HIGHCISA KEV

Windows Print Spooler Elevation of Privilege Vulnerability

Title source: CVE List
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2022-22718 has a selected CVSS score of 7.8 (high); EIP currently links 1 catalogued exploit and 1 repository PoC. CISA lists CVE-2022-22718 in KEV.

Description

Windows Print Spooler Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-21997, CVE-2022-21999, CVE-2022-22717.

Description source: GitHub Advisory

Exploitation context

Known exploitation

CISA KEV
Listed · Apr 19, 2022 · CISA
VulnCheck KEV
Listed · Apr 19, 2022 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Catalogued exploits
1
Repository PoCs
1

CISA SSVC decision

ExploitationActive
AutomatableNo
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Jan 29, 2025 · Source: CVE List

Affected products and versions

Showing 12 of 26
ProductSourceVersion range

Windows

Browse Microsoft / Windows
CISAVersion data not supplied

Windows 10 Version 1507

Browse Microsoft / Windows 10 Version 1507
CVE List10.0.10240.0 to < 10.0.10240.19204affected

Windows 10 Version 1607

Browse Microsoft / Windows 10 Version 1607
CVE List10.0.14393.0 to < 10.0.14393.4946affected

Windows 10 Version 1809

Browse Microsoft / Windows 10 Version 1809
CVE List10.0.17763.0 to < 10.0.17763.2565affected
10.0.0 to < 10.0.17763.2565affected

Windows 10 Version 1909

Browse Microsoft / Windows 10 Version 1909
CVE List10.0.0 to < 10.0.18363.2094affected

Windows 10 Version 20H2

Browse Microsoft / Windows 10 Version 20H2
CVE List10.0.0 to < 10.0.19042.1526affected

Windows 10 Version 21H1

Browse Microsoft / Windows 10 Version 21H1
CVE List10.0.0 to < 10.0.19043.1526affected

Windows 10 Version 21H2

Browse Microsoft / Windows 10 Version 21H2
CVE List10.0.19043.0 to < 10.0.19044.1526affected

Windows 11 version 21H2

Browse Microsoft / Windows 11 version 21H2
CVE List10.0.0 to < 10.0.22000.493affected

Windows 7

Browse Microsoft / Windows 7
CVE List6.1.0 to < 6.1.7601.25860affected

Windows 7 Service Pack 1

Browse Microsoft / Windows 7 Service Pack 1
CVE List6.1.0 to < 6.1.7601.25860affected

Windows 8.1

Browse Microsoft / Windows 8.1
CVE List6.3.0 to < 6.3.9600.20269affected

Proofs of concept

2

Catalogued exploits

MetasploitCVE-2022-21999 SpoolFool PrivescMetasploit exploitby Oliver Lyak +1 moreNot analyzed1 file

Ruby · linked to 2 vulnerabilities

Metasploit
PoC details

Repository PoCs

GitHubahmetfurkans/CVE-2022-22718Repository PoCby ahmetfurkans0Not analyzed2 files

221.6 KiB

GitHub
PoC details

References

4