CVE-2026-69364

Imagine the Print Spooler is a busy office mailbox that handles multiple requests at the same time. This bug is like a timing mistake where two workers can step on each other’s work, allowing someone who already has some access to “jump the line” and gain higher permissions.

This matters to you if you run Windows on endpoints or servers in these ranges (Windows 10, Windows 11, and Windows Server 2012/2012 R2/2016/2019/2022/2025) and the Print Spooler components are present. The risk is primarily if an attacker is already authorized and can reach/use the Print Spooler over the network (not just by being able to scan the internet).

Treat this as RED priority because it targets privilege escalation in a core Windows service that can be abused for deeper compromise once an attacker has suitable access. Even though it is not on the CISA KEV list and there’s no public exploit code recorded, the attacker path involves “authorized” access and network reachability, so patching should not wait.