CVE-2022-41073

Exploited in the Wild ✓ Confirmed 0-Day ★ Google Project Zero

Triaged: March 3, 2026 2 articles

VulnLookup ↗ NVD ↗ MITRE ↗ Advisory ↗ P0 Sheet ↗ CISA KEV ↗

EPSS Score

Source: FIRST.org · 2026-05-24

2.34%

probability

This CVE has a 2.34% probability of being exploited in the next 30 days.

0% Top 85.1th percentile of all CVEs 100%

CVSS score unavailable

Neither CIRCL nor NVD returned a CVSS score for this CVE. View on VulnerabilityLookup ↗

Description

Project Zero

Print spooler elevation of privilege

Attack Intelligence

CWE-118 · Incorrect Access of Indexable Resource ('Range Error') CWE-119 · Buffer Overflow CWE-664 · Improper Control of a Resource Through its Lifetime CWE-787 · Out-of-bounds Write

Google Project Zero

Patched

Nov. 8, 2022

Reported by

Microsoft Threat Intelligence Center (MSTIC)

Root Cause Analysis

https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2022/CVE-2022-41073.html

November 2022 Patch Tuesday | Microsoft Releases 65 New Vulnerabilities With 10 Critical; Adobe Releases Zero Advisories (for the First Time in Six Years).

Qualys Nov 08, 2022

Security Advisory 2022-079

CERT-EU Nov 09, 2022

Signal Intelligence

Confidenceⓘ

78%

EPSS 2.34%

Mentions 2

Last Seen Nov 09, 2022

CNA Information

Analyst Note

CVE-2022-41073 is confirmed as a Windows Print Spooler elevation of privilege vulnerability with a high CVSS score of 7.8, backed by documentation in Google Project Zero and CERT-EU security advisory indicating active exploitation. The vulnerability affects a critical system component with demonstrated real-world attack potential.

Threat Actors 2

Hacking Team

apt_group 🇮🇹 IT

APT 5

apt_group Information theft and espionage 🇨🇳 CN

Triage Info

Decided atMar 03, 2026