Reference page — cumulative record through Wednesday, October 7, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CVE-2022-38028

CVE-2022-38028HIGH

Microsoft Windows 10 Version 1809 — Windows Print Spooler Elevation of Privilege Vulnerability

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   L   L   N  U  H  H  H    7.8   .1495   96.6   YES

AFFECTED
  Product                                         Versions        Fixed
  Windows 10 Version 1809                         10.0.17763.0 –  —
  Windows 10 Version 1809                         10.0.0 –        —
  Windows Server 2019                             10.0.17763.0 –  —
  Windows Server 2019 (Server Core installation)  10.0.17763.0 –  —
  Windows 10 Version 21H1                         10.0.0 –        —
  Windows Server 2022                             10.0.20348.0 –  —
  Windows 10 Version 20H2                         10.0.0 –        —
  Windows 11 version 21H2                         10.0.0 –        —
  Windows 10 Version 21H2                         10.0.19043.0 –  —
  Windows 11 version 22H2                         10.0.22621.0 –  —
  + 9 more

TIMELINE
  Aug 8   Reserved by microsoft
  Oct 11  Published (CNA: microsoft)
  Apr 23  Added to CISA KEV, remediation due 2024-05-14

CNA: microsoft · CVSS v3.1 · 3 references · KEV due May 14, 2024

Description

Windows Print Spooler Elevation of Privilege Vulnerability

Lifecycle

Complete event history — 3 events, chronological
Date	Event	Detail
August 8, 2022	Reserved	Reserved by microsoft
October 11, 2022	Published	Published (CNA: microsoft)
April 23, 2024	KEV ADDED	Added to CISA KEV, remediation due 2024-05-14

Affected

Affected products and packages — 19 rows
Vendor	Product / Package	Ecosystem	Version introduced	Fixed
Microsoft	Windows 10 Version 1809	—	10.0.17763.0	—
Microsoft	Windows 10 Version 1809	—	10.0.0	—
Microsoft	Windows Server 2019	—	10.0.17763.0	—
Microsoft	Windows Server 2019 (Server Core installation)	—	10.0.17763.0	—
Microsoft	Windows 10 Version 21H1	—	10.0.0	—
Microsoft	Windows Server 2022	—	10.0.20348.0	—
Microsoft	Windows 10 Version 20H2	—	10.0.0	—
Microsoft	Windows 11 version 21H2	—	10.0.0	—
Microsoft	Windows 10 Version 21H2	—	10.0.19043.0	—
Microsoft	Windows 11 version 22H2	—	10.0.22621.0	—
Microsoft	Windows 10 Version 1507	—	10.0.10240.0	—
Microsoft	Windows 10 Version 1607	—	10.0.14393.0	—
Microsoft	Windows Server 2016	—	10.0.14393.0	—
Microsoft	Windows Server 2016 (Server Core installation)	—	10.0.14393.0	—
Microsoft	Windows 8.1	—	6.3.0	—
Microsoft	Windows Server 2012	—	6.2.9200.0	—
Microsoft	Windows Server 2012 (Server Core installation)	—	6.2.9200.0	—
Microsoft	Windows Server 2012 R2	—	6.3.9600.0	—
Microsoft	Windows Server 2012 R2 (Server Core installation)	—	6.3.9600.0	—

References (3)

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38028 [vendor-advisory]
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-38028 [x_transferred]
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-38028 [government-resource]

Authoritative record: CVE-2022-38028 at cve.org

Vendors: microsoft

About this page