{"id":"CVE-2026-112752","kind":"vulnerability","aliases":["CVE-2026-112752"],"related":[],"title":"Windows Print Spooler: local user can gain elevated privileges","description":"Improper access control in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.","summary":"Windows Print Spooler Components have an improper access control flaw. An attacker who already has a local account can raise their privileges on the machine.","severity":"high","cvss":7.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","print-spooler","windows"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:18:35+00:00","first_seen_at":"2026-11-10T19:24:31+00:00","triaged_at":"2026-11-10T19:42:19+00:00","updated_at":"2026-11-10T19:42:19+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-11-10T19:42:19Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Windows Print Spooler: local user can gain elevated privileges","impact":"high","summary":"Windows Print Spooler Components have an improper access control flaw. An attacker who already has a local account can raise their privileges on the machine.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows","print-spooler"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"local attacker gains administrator or SYSTEM privileges on the machine","analyst_note":"Find the Microsoft Security Update Guide entry for CVE-2026-112752 to get affected Windows builds, required setup and the patch.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Machines running the Windows Print Spooler service with local user accounts are in scope per the NVD description. The sources do not state the affected Windows builds or whether the flaw needs a print-related feature. unknown","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000649,"input_tokens":4486,"output_tokens":400,"severity_before":"high"},"analyst_status":"queued","analyst_note":"Find the Microsoft Security Update Guide entry for CVE-2026-112752 to get affected Windows builds, required setup and the patch.","search":"'-112752':12A,15A '-2026':11A,14A 'access':28B,47C 'account':38B 'allow':54C 'alreadi':34B 'attack':32B,57C 'author':56C 'compon':24B,53C 'control':29B,48C 'cve':10A,13A 'elev':8A,59C 'flaw':30B 'gain':7A 'improp':27B,46C 'infrastructur':16B 'local':4A,37B,61C 'machin':45B 'print':2A,18B,22B,51C 'print-spool':17B 'privileg':9A,42B,60C 'rais':40B 'spooler':3A,19B,23B,52C 'user':5A 'window':1A,20B,21B,50C","nicknames":[],"mitigations":[],"who_affected":"Machines running the Windows Print Spooler service with local user accounts are in scope per the NVD description. The sources do not state the affected Windows builds or whether the flaw needs a print-related feature. unknown","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["high","infrastructure","printspooler","windows"],"campaign_type":null,"search_a":"'-112752':12A,15A '-2026':11A,14A 'cve':10A,13A 'elev':8A 'gain':7A 'local':4A 'print':2A 'privileg':9A 'spooler':3A 'user':5A 'window':1A","search_b":"'access':28B 'account':38B 'alreadi':34B 'attack':32B 'compon':24B 'control':29B 'flaw':30B 'improp':27B 'infrastructur':16B 'local':37B 'machin':45B 'print':18B,22B 'print-spool':17B 'privileg':42B 'rais':40B 'spooler':19B,23B 'window':20B,21B","search_c":"'access':47C 'allow':54C 'attack':57C 'author':56C 'compon':53C 'control':48C 'elev':59C 'improp':46C 'local':61C 'print':51C 'privileg':60C 'spooler':52C 'window':50C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:18:35+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112752","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112752","severity":null,"published_at":"2026-11-10T19:18:35+00:00","modified_at":"2026-11-10T19:18:35+00:00","first_seen_at":"2026-11-10T19:24:31+00:00","fetched_at":"2026-11-10T19:24:31+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}