CVE-2022-21997
published 2022-02-09CVE-2022-21997: Windows Print Spooler Elevation of Privilege Vulnerability
PriorityP429high7.1CVSS 3.1
AVLACLPRLUINSUCNIHAH
EPSS
0.80%
52.3th percentile
Windows Print Spooler Elevation of Privilege Vulnerability
Affected
48 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | windows_10 | — | — |
| microsoft | windows_10 | — | — |
| microsoft | windows_10 | — | — |
| microsoft | windows_10 | — | — |
| microsoft | windows_10 | — | — |
| microsoft | windows_10 | — | — |
| microsoft | windows_10_version_1507 | >= 10.0.10240.0 < 10.0.10240.19204 | 10.0.10240.19204 |
| microsoft | windows_10_version_1607 | >= 10.0.14393.0 < 10.0.14393.4946 | 10.0.14393.4946 |
| microsoft | windows_10_version_1809 | >= 10.0.0 < 10.0.17763.2565 | 10.0.17763.2565 |
| microsoft | windows_10_version_1809 | >= 10.0.17763.0 < 10.0.17763.2565 | 10.0.17763.2565 |
| microsoft | windows_10_version_1909 | >= 10.0.0 < 10.0.18363.2094 | 10.0.18363.2094 |
| microsoft | windows_10_version_20h2 | >= 10.0.0 < 10.0.19042.1526 | 10.0.19042.1526 |
| microsoft | windows_10_version_21h1 | >= 10.0.0 < 10.0.19043.1526 | 10.0.19043.1526 |
| microsoft | windows_10_version_21h2 | >= 10.0.19043.0 < 10.0.19044.1526 | 10.0.19044.1526 |
| microsoft | windows_11_version_21h2 | >= 10.0.0 < 10.0.22000.493 | 10.0.22000.493 |
| microsoft | windows_7 | — | — |
| microsoft | windows_7 | >= 6.1.0 < 6.1.7601.25860 | 6.1.7601.25860 |
| microsoft | windows_7_service_pack_1 | >= 6.1.0 < 6.1.7601.25860 | 6.1.7601.25860 |
| microsoft | windows_8.1 | >= 6.3.0 < 6.3.9600.20269 | 6.3.9600.20269 |
| microsoft | windows_server | — | — |
| microsoft | windows_server | — | — |
| microsoft | windows_server_2008 | — | — |
| microsoft | windows_server_2008_r2_service_pack_1 | >= 6.1.7601.0 < 6.1.7601.25860 | 6.1.7601.25860 |
| microsoft | windows_server_2008_service_pack_2 | >= 6.0.6003.0 < 6.0.6003.21374 | 6.0.6003.21374 |
| microsoft | windows_server_2012 | — | — |
CVSS provenance
nvdv3.17.1HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
nvdv2.03.6LOWAV:L/AC:L/Au:N/C:N/I:P/A:P
vendor_msrc7.1HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Microsoft
Windows Print Spooler Elevation of Privilege Vulnerability
vendor_msrc·2022-02-08·CVSS 7.1
CVE-2022-21997 [HIGH] Windows Print Spooler Elevation of Privilege Vulnerability
Windows Print Spooler Elevation of Privilege Vulnerability
FAQ: What privileges could be gained by an attacker who successfully exploited the vulnerability?
An attacker would only be able to delete targeted files on a system. They would not gain privileges to view or modify file contents.
Windows Print Spooler Components: Windows Print Spooler Components
Microsoft: Microsoft
Customer Action Required: Yes
Impact: Elevation of Privilege
Exploit Status: Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
Reference: https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5010351
Reference: https://support.microsoft.com/help/5010351
Reference: https://catalog.update.microsoft.com/v7/site/Search
GHSA
GHSA-88wr-wm4j-qgww: Windows Print Spooler Elevation of Privilege Vulnerability
ghsa_unreviewed·2022-02-10·CVSS 7.8
CVE-2022-21997 [HIGH] CWE-269 GHSA-88wr-wm4j-qgww: Windows Print Spooler Elevation of Privilege Vulnerability
Windows Print Spooler Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-21999, CVE-2022-22717, CVE-2022-22718.
GHSA
GHSA-x6gv-8c9f-6r64: Windows Print Spooler Elevation of Privilege Vulnerability
ghsa_unreviewed·2022-02-10·CVSS 7.1
CVE-2022-22717 [HIGH] CWE-269 GHSA-x6gv-8c9f-6r64: Windows Print Spooler Elevation of Privilege Vulnerability
Windows Print Spooler Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-21997, CVE-2022-21999, CVE-2022-22718.
GHSA
GHSA-r854-85qm-m3f9: Windows Print Spooler Elevation of Privilege Vulnerability
ghsa_unreviewed·2022-02-10·CVSS 7.1
CVE-2022-22718 [HIGH] CWE-269 GHSA-r854-85qm-m3f9: Windows Print Spooler Elevation of Privilege Vulnerability
Windows Print Spooler Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-21997, CVE-2022-21999, CVE-2022-22717.
GHSA
GHSA-9cr3-63pg-942x: Windows Print Spooler Elevation of Privilege Vulnerability
ghsa_unreviewed·2022-02-10·CVSS 7.1
CVE-2022-21999 [HIGH] CWE-22 GHSA-9cr3-63pg-942x: Windows Print Spooler Elevation of Privilege Vulnerability
Windows Print Spooler Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-21997, CVE-2022-22717, CVE-2022-22718.
No detection rules found.
No public exploits indexed.
Tenable
Microsoft’s March 2024 Patch Tuesday Addresses 59 CVEs (CVE-2024-21407)
blogs_tenable·2024-03-12·CVSS 8.1
[HIGH] Microsoft’s March 2024 Patch Tuesday Addresses 59 CVEs (CVE-2024-21407)
## Cloud Exposure
Tenable Cloud Security (CNAPP) Request a demo
Tenable Cloud Vulnerability Management Request a demo
Tenable CIEM Request a demo
Secure your cloud
## Vulnerability Exposure
Tenable Vulnerability Management Try for free
Tenable Security Center Request a demo
Tenable Web App Scanning Try for free
Tenable Patch Management Request a demo
Tenable Enclave Security Request a demo
Tenable Attack Surface Management Request a demo
Tenable Nessus Try for free
## AI Exposure
Tenable AI Exposure Request a demo
## OT/IoT Exposure
Tenable OT Security Request a demo
## Identity Exposure
Tenable Identity Exposure Request a demo
## Business needs
Active Directory
AI Security Posture Management (AI-SPM)
AWS security
Azure security
Cloud Security Posture Man
Talos
Microsoft Patch Tuesday for Feb. 2022 — Snort rules and prominent vulnerabilities
blogs_talos·2022-02-08·CVSS 7.8
CVE-2022-21997 [HIGH] Microsoft Patch Tuesday for Feb. 2022 — Snort rules and prominent vulnerabilities
Microsoft released its monthly security update Tuesday, disclosing 51 vulnerabilities across its large collection of hardware and software.
None of the vulnerabilities disclosed this month are considered “critical,” an extreme rarity for the company’s Patch Tuesdays. Additionally, none of the issues Microsoft patched have been exploited in the wild to this point, nor have they been publicly disclosed.
There are still a few vulnerabilities of note, however, including CVE-2022-21997, CVE-2022-21999 and CVE-2022-22715, which are all privilege elevation vulnerabilities in the Microsoft print spooler service. In the event an exploit is developed, an adversary could use these vulnerabilities to execute code as a system user or higher-level privileges.
There are four other similar vulnerabilit
Tenable
Microsoft’s February 2022 Patch Tuesday Addresses 48 CVEs (CVE-2022-21989)
blogs_tenable·2022-02-08·CVSS 7.8
[HIGH] Microsoft’s February 2022 Patch Tuesday Addresses 48 CVEs (CVE-2022-21989)
## Cloud Exposure
Tenable Cloud Security (CNAPP) Request a demo
Tenable Cloud Vulnerability Management Request a demo
Tenable CIEM Request a demo
Secure your cloud
## Vulnerability Exposure
Tenable Vulnerability Management Try for free
Tenable Security Center Request a demo
Tenable Web App Scanning Try for free
Tenable Patch Management Request a demo
Tenable Enclave Security Request a demo
Tenable Attack Surface Management Request a demo
Tenable Nessus Try for free
## AI Exposure
Tenable AI Exposure Request a demo
## OT/IoT Exposure
Tenable OT Security Request a demo
## Identity Exposure
Tenable Identity Exposure Request a demo
## Business needs
Active Directory
AI Security Posture Management (AI-SPM)
AWS security
Azure security
Cloud Security Posture Man
Talos
Microsoft Patch Tuesday for Feb. 2022 — Snort rules and prominent vulnerabilities
blogs_talos·2022-02-08·CVSS 7.8
[HIGH] Microsoft Patch Tuesday for Feb. 2022 — Snort rules and prominent vulnerabilities
## Microsoft Patch Tuesday for Feb. 2022 — Snort rules and prominent vulnerabilities
Microsoft released its monthly security update Tuesday, disclosing 51 vulnerabilities across its large collection of hardware and software.
None of the vulnerabilities disclosed this month are considered “critical,” an extreme rarity for the company’s Patch Tuesdays. Additionally, none of the issues Microsoft patched have been exploited in the wild to this point, nor have they been publicly disclosed.
There are still a few vulnerabilities of note, however, including CVE-2022-21997 , CVE-2022-21999 and CVE-2022-22715 , which are all privilege elevation vulnerabilities in the Microsoft print spooler service. In the event an exploit is developed, an adversary could use these vulnerabilities to execute code
2022-02-09
Published