Executive brief
Windows Print Spooler is a system service that manages printing tasks on Windows computers. A use-after-free vulnerability in this component allows an authorized local user to execute arbitrary code with elevated privileges, potentially leading to full system compromise. An attacker with basic user access could exploit this flaw to gain administrative control of the affected computer.
Technical details
A use-after-free vulnerability exists in Windows Print Spooler Components, where freed memory is accessed after deallocation, leading to potential code execution. The vulnerability requires local network access and an authorized user account to exploit. An attacker with legitimate user credentials can trigger the flaw to elevate privileges from a standard user to SYSTEM or administrative level. The specific root cause involves memory management flaws in the spooler service when processing print requests. Microsoft has released patches to address this issue; users should apply available security updates.
Affected products
- Microsoft Windows <UNKNOWN>
Timeline
- 2026-09-08: disclosed
- 2026-09-08: advisory