Fixed Intel

CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation Deadline: Dec 9, 2022

CVE-2022-41073

High
EPSS 1.9%CISA KEVRansomware
Microsoft/Windows

Description

Microsoft Windows Print Spooler contains an unspecified vulnerability that allows an attacker to gain SYSTEM-level privileges.

EPSS — Exploit Probability

1.9%

Higher than 83.0% of all CVEs

Required Action

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-41073; https://nvd.nist.gov/vuln/detail/CVE-2022-41073

Risk Assessment

HIGH
In CISA KEV
Ransomware

Details

Severity
High
EPSS
1.9%
CISA KEV
Yes
Ransomware
Known
Articles
0

Timeline

Published

Nov 8, 2022

Added to KEV

Nov 8, 2022

Remediation Due

Dec 9, 2022

Affected Product

Microsoft

Windows

View all Microsoft CVEs