Loading vulnerability…
Windows Print Spooler Use-After-Free Remote Code Execution
CVE-2026-113752 is a use-after-free vulnerability in Windows Print Spooler Components that allows an unauthenticated attacker on an adjacent network to execute arbitrary code. Successful exploitation requires winning a race condition but does not require user interaction. Microsoft classifies the vulnerability as Critical, assigns a CVSS v3.1 base score of 7.5, and assesses exploitation as less likely. The specific vulnerable function and affected Windows versions are not identified.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation can compromise the confidentiality, integrity, and availability of the affected Windows system through remote code execution. The execution privilege level is not specified.
Patch, then assume compromise.
Apply Microsoft's official security update for the affected Windows installation. Consult the Microsoft Security Update Guide entry for CVE-2026-113752 to identify the applicable update for the installed Windows version and architecture. Specific KB numbers and fixed versions are not available in the supplied information.
No public exploits tracked yet. Mallory keeps watching.
4 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.