Windows Print Spooler Components
by Microsoft
CVEs (32)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-69552 | Med | 0.37 | 5.7 | 0.01 | Sep 8, 2026 | Generation of error message containing sensitive information in Windows Print Spooler Components allows an authorized attacker to disclose information over a network. | ||
| CVE-2025-49722 | Med | 0.37 | 5.7 | 0.01 | Jul 8, 2025 | Uncontrolled resource consumption in Windows Print Spooler Components allows an authorized attacker to deny service over an adjacent network. | ||
| CVE-2026-85320 | Med | 0.36 | 5.5 | 0.00 | Oct 13, 2026 | Use of uninitialized resource in Windows Print Spooler Components allows an authorized attacker to disclose information locally. | ||
| CVE-2026-83733 | Med | 0.36 | 5.5 | 0.00 | Oct 13, 2026 | Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally. | ||
| CVE-2026-69344 | Med | 0.36 | 5.5 | 0.00 | Sep 8, 2026 | Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally. | ||
| CVE-2005-1984 | 0.04 | — | 0.55 | Aug 10, 2005 | Buffer overflow in the Print Spooler service (Spoolsv.exe) for Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code via a malicious message. | |||
| CVE-2009-0230 | 0.03 | — | 0.35 | Jun 10, 2009 | The Windows Print Spooler in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 allows remote authenticated users to gain privileges via a crafted RPC message that triggers loading of a DLL file from an arbitrary directory,… | |||
| CVE-2009-0228 | 0.02 | — | 0.20 | Jun 10, 2009 | Stack-based buffer overflow in the EnumeratePrintShares function in Windows Print Spooler Service (win32spl.dll) in Microsoft Windows 2000 SP4 allows remote printer servers to execute arbitrary code via a crafted ShareName in a response to an RPC request, related to "printing… | |||
| CVE-2026-57085 | Med | 0.00 | 5.5 | 0.00 | Jul 14, 2026 | Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally. | ||
| CVE-2026-50499 | Hig | 0.00 | 7.8 | 0.00 | Jul 14, 2026 | Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-50383 | Med | 0.00 | 6.1 | 0.00 | Jul 14, 2026 | Buffer over-read in Windows Print Spooler Components allows an authorized attacker to disclose information locally. | ||
| CVE-2026-58608 | Hig | 0.00 | 8.8 | 0.01 | Jul 14, 2026 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Print Spooler Components allows an authorized attacker to execute code over a network. |
- risk 0.37cvss 5.7epss 0.01
Generation of error message containing sensitive information in Windows Print Spooler Components allows an authorized attacker to disclose information over a network.
- risk 0.37cvss 5.7epss 0.01
Uncontrolled resource consumption in Windows Print Spooler Components allows an authorized attacker to deny service over an adjacent network.
- risk 0.36cvss 5.5epss 0.00
Use of uninitialized resource in Windows Print Spooler Components allows an authorized attacker to disclose information locally.
- risk 0.36cvss 5.5epss 0.00
Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.
- risk 0.36cvss 5.5epss 0.00
Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.
- CVE-2005-1984Aug 10, 2005risk 0.04cvss —epss 0.55
Buffer overflow in the Print Spooler service (Spoolsv.exe) for Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code via a malicious message.
- CVE-2009-0230Jun 10, 2009risk 0.03cvss —epss 0.35
The Windows Print Spooler in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 allows remote authenticated users to gain privileges via a crafted RPC message that triggers loading of a DLL file from an arbitrary directory,…
- CVE-2009-0228Jun 10, 2009risk 0.02cvss —epss 0.20
Stack-based buffer overflow in the EnumeratePrintShares function in Windows Print Spooler Service (win32spl.dll) in Microsoft Windows 2000 SP4 allows remote printer servers to execute arbitrary code via a crafted ShareName in a response to an RPC request, related to "printing…
- risk 0.00cvss 5.5epss 0.00
Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.
- risk 0.00cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
- risk 0.00cvss 6.1epss 0.00
Buffer over-read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.
- risk 0.00cvss 8.8epss 0.01
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Print Spooler Components allows an authorized attacker to execute code over a network.
Page 2 of 2