CVE-2022-22718

HighCVSS 7.8/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

Windows Print Spooler Elevation of Privilege Vulnerability

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Feb 9, 2022
Last modified
Jun 17, 2026
Added to CISA KEV
Apr 19, 2022
NVD status
Analyzed

Related CVEs from 2022

CVE-2022-227197.5A carefully crafted request body can cause a read to a random memory area which could cause the process to crash. This issue affects Apache CVE-2022-22729.8This vulnerability allows remote attackers to bypass authentication on affected installations of Sante PACS Server 3.0.4. Authentication is CVE-2022-227209.8Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are encountered discarding the request body, exposing thCVE-2022-227219.1If LimitXMLRequestBody is set to allow request bodies larger than 350MB (defaults to 1M) on 32 bit systems an integer overflow happens whichCVE-2022-227227.5A CWE-798: Use of Hard-coded Credentials vulnerability exists that could result in information disclosure. If an attacker were to obtain theCVE-2022-227238.8A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could lead to a buffer overflow causing program crashes and CVE-2022-227247.5A CWE-400: Uncontrolled Resource Consumption vulnerability exists that could cause a denial of service on ports 80 (HTTP) and 502 (Modbus), CVE-2022-227258.8A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could lead to a buffer overflow causing program crashes and CVE-2022-227266.5A CWE-20: Improper Input Validation vulnerability exists that could allow arbitrary files on the server to be read by authenticated users thCVE-2022-227278.8A CWE-20: Improper Input Validation vulnerability exists that could allow an unauthenticated attacker to view data, change settings, impact CVE-2022-227287.5A flaw in Apache libapreq2 versions 2.16 and earlier could cause a buffer overflow while processing multipart form uploads. A remote attackeCVE-2022-227298.8CAMS for HIS Server contained in the following Yokogawa Electric products improperly authenticate the receiving packets. The authentication
CVE-2022-22718: High severity, CVSS 7.8 | Vulnix