Relative Path Traversal in Microsoft Windows and Windows Server - CVE-2026-112762

Vulnerability details

The vulnerability allows a remote attacker to elevate privileges and write files with SYSTEM privileges on the affected system.

The vulnerability exists due to relative path traversal in Windows Print Spooler Components when connecting to a specially crafted shared printer over a network. A remote attacker can convince a user to connect to a shared printer hosted on an attacker-controlled server to write files with SYSTEM privileges on the user's system.

Affected software

How to mitigate CVE-2026-112762

External References

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2026-112762
• https://support.microsoft.com/help/5131291

Related Security Bulletins

• Multiple vulnerabilities in Microsoft Windows