What is CVE-2022-21999?

CVE-2022-21999 is a high-severity Windows Print Spooler Elevation of Privilege Vulnerability that affects various Microsoft Windows operating systems, including Windows 10, Windows 11, and Windows Server versions. The vulnerability impacts systems with x64, x86, and ARM64 architectures, allowing an attacker to gain higher privileges and perform unauthorized actions. Addressing this vulnerability is crucial for maintaining system security in today's remote work environment.

Who is impacted by CVE-2022-21999?

CVE-2022-21999 affects users of Microsoft Windows operating systems, including Windows 10, Windows 11, and various Windows Server versions. This issue impacts systems with x64, x86, and ARM64 architectures, including Windows Server 2012, 2016, 2019, and 2022, as well as Windows 8.1 and various versions of Windows 10 and 11. Federal, executive branch departments, and agencies safeguarding federal information and information systems are also impacted, as per the Cybersecurity and Infrastructure Security Agency's (CISA) Binding Operational Directive 22-01.

What to do if CVE-2022-21999 affected you

If you're affected by the CVE-2022-21999 vulnerability, it's important to take action to secure your system. Follow these simple steps:

1. Review the information about the vulnerability and its impact on your system.

2. Apply the security updates provided by Microsoft for your specific Windows operating system or server version. See the Microsoft Security Update Guide for details.

3. Monitor the CISA Binding Operational Directive 22-01 and the Known Exploited Vulnerabilities Catalog for updates and additional guidance.

Is this in CISA’s Known Exploited Vulnerabilities Catalog?

The CVE-2022-21999 vulnerability, also known as the Microsoft Windows Print Spooler Privilege Escalation Vulnerability, is indeed listed in CISA's Known Exploited Vulnerabilities Catalog. It was added on March 25, 2022, and the due date for remediation is April 15, 2022. To address this vulnerability, users should apply updates as per vendor instructions.

Weakness Enumeration

The weakness enumeration for CVE-2022-21999 includes CWE-59 (Improper Link Resolution) and CWE-22 (Path Traversal), affecting Windows Print Spooler.

Learn More

For a comprehensive understanding of its description, severity, technical details, and affected software configurations, refer to the NVD page or the resources listed below.

• CVE-2022-21999 - Security Update Guide - Microsoft - Windows Print Spooler Elevation of Privilege Vulnerability

• BOD 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities | CISA

• Known Exploited Vulnerabilities Catalog