CVE-2022-30138— Windows Print Spooler Elevation of Privilege Vulnerability

Quick assessment

Copy summary Copy citation

Affected

Microsoft Windows 10 Version 1809

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Microsoft Windows Print Spooler Components是美国微软（Microsoft）公司的一个打印后台处理程序组件。 Microsoft Windows Print Spooler Components 存在缓冲区错误漏洞，该漏洞源于Windows Print Spooler 服务中的边界错误。本地用户可以利用该漏洞触发内存损坏并以提升的权限执行任意代码。

CVE-2022-30138 affects Microsoft Windows 10 Version 1809. No confirmed in-the-wild exploitation; assess based on exposure. Microsoft Windows Print Spooler Components是美国微软（Microsoft）公司的一个打印后台处理程序组件。 Microsoft Windows Print Spooler Components 存在缓冲区错误漏洞，该漏洞源于Windows Print Spooler 服务中的边界错误。本地用户可以利用该漏洞触发内存损 CVE-2022-30138 vulnerability details, Shenlong CVE Platform, https://cve.imfht.com/detail/CVE-2022-30138

I. Basic Information for CVE-2022-30138

Affected Products

II. Public POCs for CVE-2022-30138

III. Intelligence Information for CVE-2022-30138

Vendor Advisories for CVE-2022-30138 (2)

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-30138 x_refsource_MISC
• CVE-2022-30138 - Security Update Guide - Microsoft - Windows Print Spooler Elevation of Privilege Vulnerability vendor-advisory

• https://www.cve.org/CVERecord?id=CVE-2022-30138

IV. Related Vulnerabilities

V. Comments for CVE-2022-30138