CISA Adds One Known Exploited Vulnerability to Catalog

Summary:

The Cybersecurity and Infrastructure Security Agency (CISA) has added a new vulnerability, CVE-2022-38028, to its Known Exploited Vulnerabilities Catalog. This vulnerability, a Microsoft Windows Print Spooler Privilege Escalation Vulnerability, has been identified as an active threat and poses significant risks to the federal enterprise. CISA recommends that Federal Civilian Executive Branch (FCEB) agencies remediate this vulnerability by the due date to protect their networks against active threats. Additionally, CISA strongly urges all organizations to prioritize timely remediation of catalog vulnerabilities to reduce their exposure to cyberattacks.