CVE-2022-21999

HighCVSS 7.8/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

Windows Print Spooler Elevation of Privilege Vulnerability

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-22CWE-59

Affected software

No affected versions have been published.

Timeline

Published
Feb 9, 2022
Last modified
Jun 17, 2026
Added to CISA KEV
Mar 25, 2022
NVD status
Analyzed

Related CVEs from 2022

CVE-2022-22008.8If an object prototype was corrupted by an attacker, they would have been able to set undesired attributes on a JavaScript object, leading tCVE-2022-220007.8Windows Common Log File System Driver Elevation of Privilege VulnerabilityCVE-2022-220017.8Windows Remote Access Connection Manager Elevation of Privilege VulnerabilityCVE-2022-220025.5Windows User Account Profile Picture Denial of Service VulnerabilityCVE-2022-220037.8Microsoft Office Graphics Remote Code Execution VulnerabilityCVE-2022-220047.8Microsoft Office ClickToRun Remote Code Execution VulnerabilityCVE-2022-220058.8Microsoft SharePoint Server Remote Code Execution VulnerabilityCVE-2022-220067.8HEVC Video Extensions Remote Code Execution VulnerabilityCVE-2022-220077.8HEVC Video Extensions Remote Code Execution VulnerabilityCVE-2022-220087.8Windows Hyper-V Remote Code Execution VulnerabilityCVE-2022-220097.8Windows Hyper-V Remote Code Execution VulnerabilityCVE-2022-220104.4Media Foundation Information Disclosure Vulnerability