{"id":"CVE-2026-112762","kind":"vulnerability","aliases":["CVE-2026-112762"],"related":[],"title":"Windows Print Spooler: path traversal lets an attacker gain higher privileges","description":"Relative path traversal in Windows Print Spooler Components allows an unauthorized attacker to elevate privileges over a network.","summary":"A relative path traversal flaw in Windows Print Spooler components lets an unauthorized attacker elevate privileges over the network. NVD rates it high (CVSS 8.8) and the sources give no further detail.","severity":"high","cvss":8.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","print-spooler","windows"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:18:39+00:00","first_seen_at":"2026-11-10T19:24:32+00:00","triaged_at":"2026-11-10T19:31:49+00:00","updated_at":"2026-11-10T19:31:49+00:00","category":"infrastructure","confidence":0.4,"triage":{"at":"2026-11-10T19:31:49Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Windows Print Spooler: path traversal lets an attacker gain higher privileges","impact":"high","summary":"A relative path traversal flaw in Windows Print Spooler components lets an unauthorized attacker elevate privileges over the network. NVD rates it high (CVSS 8.8) and the sources give no further detail.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows","print-spooler"],"confidence":0.4,"fix_status":"unknown","needs_auth":"unknown","worst_case":"attacker gains elevated privileges on the Windows host over the network","analyst_note":"Check the Microsoft Security Response Center entry for CVE-2026-112762 for affected Windows builds, the patch, and whether network access is required.","how_to_check":"- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Windows systems running the Print Spooler service are the likely exposure, but the sources do not name affected versions or the exact configuration. unknown","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000655,"input_tokens":4494,"output_tokens":412,"severity_before":"high"},"analyst_status":"queued","analyst_note":"Check the Microsoft Security Response Center entry for CVE-2026-112762 for affected Windows builds, the patch, and whether network access is required.","search":"'-112762':14A,17A '-2026':13A,16A '8.8':47B 'allow':63C 'attack':8A,36B,66C 'compon':32B,62C 'cve':12A,15A 'cvss':46B 'detail':54B 'elev':37B,68C 'flaw':27B 'gain':9A 'give':51B 'high':45B 'higher':10A 'infrastructur':18B 'let':6A,33B 'network':41B,72C 'nvd':42B 'path':4A,25B,56C 'print':2A,20B,30B,60C 'print-spool':19B 'privileg':11A,38B,69C 'rate':43B 'relat':24B,55C 'sourc':50B 'spooler':3A,21B,31B,61C 'travers':5A,26B,57C 'unauthor':35B,65C 'window':1A,22B,29B,59C","nicknames":[],"mitigations":[],"who_affected":"Windows systems running the Print Spooler service are the likely exposure, but the sources do not name affected versions or the exact configuration. unknown","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["high","infrastructure","printspooler","windows"],"campaign_type":null,"search_a":"'-112762':14A,17A '-2026':13A,16A 'attack':8A 'cve':12A,15A 'gain':9A 'higher':10A 'let':6A 'path':4A 'print':2A 'privileg':11A 'spooler':3A 'travers':5A 'window':1A","search_b":"'8.8':47B 'attack':36B 'compon':32B 'cvss':46B 'detail':54B 'elev':37B 'flaw':27B 'give':51B 'high':45B 'infrastructur':18B 'let':33B 'network':41B 'nvd':42B 'path':25B 'print':20B,30B 'print-spool':19B 'privileg':38B 'rate':43B 'relat':24B 'sourc':50B 'spooler':21B,31B 'travers':26B 'unauthor':35B 'window':22B,29B","search_c":"'allow':63C 'attack':66C 'compon':62C 'elev':68C 'network':72C 'path':56C 'print':60C 'privileg':69C 'relat':55C 'spooler':61C 'travers':57C 'unauthor':65C 'window':59C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:18:39+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112762","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112762","severity":null,"published_at":"2026-11-10T19:18:39+00:00","modified_at":"2026-11-10T19:18:39+00:00","first_seen_at":"2026-11-10T19:24:32+00:00","fetched_at":"2026-11-10T19:24:32+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}