Weak authentication in Windows Print Spooler Components allows an authorized user to elevate privileges locally, potentially reaching system level. The flaw lets the attacker bypass normal security controls and gain higher privileges without needing external access. The vulnerability is rooted in improper authentication handling (CWE-1390).

Microsoft Windows 10 releases from version 1607 through 22H2, Microsoft Windows 11 releases 23H2, 24H2, 25H2, 26H2, and 26H1, and Microsoft Windows Server editions including 2012, 2012 R2, 2016, 2019, 2022, and 2025 (all core and standard editions).

The CVSS score of 7.8 indicates a high severity for local privilege escalation. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is local; an attacker must already have an authorized account or have remote access that enables local code execution. Once the print spooler component is exploited, the attacker can attain system‑level privileges on the affected machine.