Skip to main content

CVE-2026-34342

Windows Print Spooler Elevation of Privilege vulnerability

Microsoft

MSRC advisory May 12, 2026

Alert details

Source feed
Microsoft MSRC
CVE ID
CVE-2026-34342
Affected products
Windows Print Spooler Elevation of Privilege · Microsoft Windows Print Spooler Elevation of Privilege · Microsoft

What happened

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

What it means for your business

Windows Print Spooler Elevation of Privilege vulnerability (CVE-2026-34342) was added to Microsoft’s security update guidance. Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. PremierePC tracks MSRC advisories for Upstate SC businesses — patch or open a ticket if you need help verifying exposure.

EPSS probability

0.29%

Sources

Related briefs

Microsoft MSRC

CVE-2026-68801

Microsoft Excel Remote Code Execution vulnerability

Microsoft Excel Remote Code Execution vulnerability (CVE-2026-68801) was added to Microsoft’s security update guidance. Updated an acknowledgement. This is an informational change only. If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-64903

Microsoft Office Remote Code Execution vulnerability

Microsoft Office Remote Code Execution vulnerability (CVE-2026-64903) was added to Microsoft’s security update guidance. Updated an acknowledgement. This is an informational change only. If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-64899

Microsoft Office Information Disclosure vulnerability

Microsoft Office Information Disclosure vulnerability (CVE-2026-64899) was added to Microsoft’s security update guidance. Updated an acknowledgement. This is an informational change only. If you need help checking exposure, call (864) 335-9223.

Microsoft MSRC

CVE-2026-58547

Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege vulnerability

Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege vulnerability (CVE-2026-58547) was added to Microsoft’s security update guidance. Updated an acknowledgement. This is an informational change only. If you need help checking exposure, call (864) 335-9223.

Need help patching?

PremierePC monitors KEV alerts for managed clients and helps teams prioritize remediation before attackers do.