EUVD-2026-22625
GHSA-pmv4-pg97-2f6v
CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionNVD
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
AnalysisAI
Local privilege escalation in Windows Print Spooler Components allows authenticated attackers with low privileges to achieve complete system compromise (high confidentiality, integrity, and availability impact) by exploiting a use-after-free memory corruption vulnerability. Affects Windows 11 versions 24H2, 25H2, 26H1, Windows Server 2022 23H2 Edition, and Windows Server 2025. …
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
Within 24 hours: Identify all affected Windows 11 and Windows Server systems in inventory matching versions 24H2, 25H2, 26H1 (Win11) and 23H2 (Server 2022), 2025 (Server 2025); prioritize domain-joined systems and servers. Within 7 days: Deploy the vendor-released Windows security update addressing CVE-2026-33101 to all affected systems, beginning with critical infrastructure and servers; validate patch installation via Windows Update history or WSUS reports. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today