EUVD-2026-73466
GHSA-wwq5-jfqh-3vh9
Severity by source
AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Network-reachable spooler, low-privilege authenticated attacker, user interaction required; full CIA impact consistent with SYSTEM-level privilege escalation.
Primary rating from Vendor (microsoft).
CVSS VectorVendor: microsoft
Lifecycle Timeline
3DescriptionCVE.org
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network.
AnalysisAI
Heap-based buffer overflow in Windows Print Spooler Components enables network-reachable authenticated attackers to escalate privileges to full system control, achieving high confidentiality, integrity, and availability impact. Affected versions span the entire current Windows ecosystem, from Windows Server 2012 through Windows 11 26H1 and Windows Server 2025, making this a broadly impactful privilege escalation path. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires a valid low-privilege account on the target Windows domain or local machine (PR:L - 'authorized attacker' per description). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 8.0 score reflects a meaningful but not zero-bar attack: PR:L requires an authenticated foothold and UI:R adds a prerequisite step that reduces drive-by exploitability. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply Microsoft's security updates immediately via Windows Update or WSUS, targeting the fixed build numbers listed per-version in the EUVD data (e.g., Server 2022 to 10.0.20348.5622, Server 2025 to 10.0.26100.33438, Windows 11 24H2 to 10.0.26100.9445). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, enumerate all Windows systems across the organization including Windows Server 2012 through 2025 and Windows 11 26H1 instances and identify those with the highest user-access density and network criticality. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-122 – Heap-based Buffer Overflow
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today