Windows print service boundary error

A service boundary error may permit local privilege escalation under a constrained set of spooler configurations.

Published 29 Aug 2026Updated 1 Sep 20268 sources
CVSS 7.8 △ CISA KEV

What happened

A print-service operation applies insufficient authorization checks when transitioning a job between trust contexts.

Affected versions

Windows Print Service: Server 2022–2025 Fixed: Latest security update.

Why it matters

Print services are commonly present on enterprise hosts and may provide a path from an existing user context to elevated permissions.

Detection & mitigation

  • Apply the latest vendor security update.
  • Disable the print service where it is not required.
  • Monitor service configuration changes.

Public PoC references

No public PoC reference has passed the current publication threshold.