Microsoft Windows Print Spooler Privilege Escalation ยท updates https://pwn.watch/i/microsoft-windows-cve-2022-38028 Microsoft Windows Print Spooler service contains a privilege escalation vulnerability. An attacker may modify a JavaScript constraints file and execute it with SYSTEM-level permissions. Added to the CISA KEV catalog on 2024-04-23. CVE-2022-38028 was assigned before 2024; the KEV listing came in 2024. en Tue, 23 Apr 2024 00:00:00 GMT Microsoft Windows Print Spooler Privilege Escalation: CISA added CVE-2022-38028 to the KEV catalog (federal deadline 2024-05-14) https://pwn.watch/i/microsoft-windows-cve-2022-38028 https://pwn.watch/i/microsoft-windows-cve-2022-38028#2024-04-23-427d5f28 Tue, 23 Apr 2024 00:00:00 GMT high <p><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Source</a></p>