CVE-2022-38028

Microsoft Windows Print Spooler service contains a privilege escalation vulnerability. An attacker may modify a JavaScript constraints file and execute it with SYSTEM-level permissions. Vendor/Product: Microsoft Windows. Added to CISA KEV 2024-04-23; required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.