CVE-2022-29140

EUVD-2022-33550
Windows Print Spooler Information Disclosure Vulnerability
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.5 MEDIUM
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
microsoftCNA
5.5 MEDIUM
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 81%
Affected Products (NVD)
VendorProductVersion
microsoftwindows_11
-
microsoftwindows_11
-
microsoftwindows_server_2016
-
microsoftwindows_server_2019
-
microsoftwindows_server_2022
-
𝑥
= Vulnerable software versions
Windows Releases
Platform
Version
Windows 10
1607 (x64, x86)
KB5013952
1809 (arm64, x64, x86)
KB5013941
1909 (arm64, x64, x86)
KB5013945
20H2 (arm64, x86)
KB5013942
21H1 (arm64, x64, x86)
KB5013942
21H2 (arm64, x64, x86)
KB5013942
Windows 11
21H2 (arm64, x64)
KB5013943
Windows Server
20H2 Server Core
KB5013942
Windows Server 2016
Server Core
KB5013952
Standard
KB5013952
Windows Server 2019
Server Core
KB5013941
Standard
KB5013941
Windows Server 2022
Server Core
KB5013944
Standard
KB5013944
References
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-29140
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-29140