CVE-2022-38028Vulnerability
Microsoft Windows Print Spooler Privilege Escalation Vulnerability
Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .
Reported by 1 independent source · first reported by Sekoia.io · last reported
Last reported 4 months ago
CISA KEVAdded 23 Apr 2024
Fix due 14 May 2024
Used by ransomware: not knownCISA KEV catalogue
Fix due 14 May 2024
Used by ransomware: not knownCISA KEV catalogue
EPSS14.9%
higher than 96% of CVEsFIRST EPSS, as of 23 Oct 2026
higher than 96% of CVEsFIRST EPSS, as of 23 Oct 2026
What the reports say
1 report, newest first · the exact sentence from each-
APT28: An Evolution of Tradecraft from X-Agent to LLM Malware“GooseEgg weaponises CVE-2022-38028 in the Windows Print Spooler service to obtain SYSTEM-level execution.”
Indicators reported together
named in the same reportsAlso named with it: CVE-2023-23397
Thanks — we review every report.