CVE coverage
View on NVD →
CVE-2022-38028
CVSS 7.8
Actively exploited (KEV)
6 detections found
Windows Print Spooler Elevation of Privilege Vulnerability
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| elastic | Potential privilege escalation via CVE-2022-38028 | production | 2026-09-18 |
| sigma | Forest Blizzard APT - Process Creation Activity | experimental | 2025-01-22 |
| sigma | Forest Blizzard APT - File Creation Activity | test | 2024-07-11 |
| sigma | Forest Blizzard APT - JavaScript Constrained File Creation | test | 2024-04-23 |
| sigma | Forest Blizzard APT - Custom Protocol Handler Creation | test | 2024-04-23 |
| sigma | Forest Blizzard APT - Custom Protocol Handler DLL Registry Set | test | 2024-04-23 |