Netskope Threat Labs

OS-WINDOWS Microsoft Windows Print Spooler elevation of privilege attempt

IPS-SWG

5 SIDs: 58753, 58993, 60315, 60317, 60376

Stats

First seen
April 2025
Last seen
September 2026

Description

Detects an attempt to exploit CVE-2021-41333, CVE-2022-22718, CVE-2022-21999, and CVE-2022-35793, a privilege escalation flaw that can grant higher access in Microsoft Windows Print Spooler.

CVEs

CVE-2021-41333CVE-2022-22718CVE-2022-21999CVE-2022-35793

Related malware families

CVE-2022-22718CVE-2022-21999Microsoft

References