CVE-2024-21442

This is a local elevation-of-privilege bug in the Windows USB Print Driver. Microsoft's summary is terse, and the vector fills in the shape: a low-privileged attacker already executing on the machine abuses the print-driver component to raise their privileges, with the affected surface spanning Windows 10 and 11 and Windows Server 2022. It's not a remote entry point — it's the step that turns an existing foothold into higher, likely SYSTEM-level, control.

That places it squarely in the post-compromise toolkit. EoP flaws like this don't get an attacker onto a host; they matter once one is there — after a phishing payload, a malicious app, or a low-privilege service compromise — as the pivot to full control that unlocks credential theft, persistence, and lateral movement. Local print-driver escalations have a strong track record of being folded into real intrusion chains, so this is a when-not-if inclusion for post-access tooling.

Because it's broadly present across the Windows fleet, our angle is patch coverage on the monthly cadence rather than perimeter reachability. We track deployment of the fix across all affected editions and weight endpoints that host untrusted or lower-trust code most heavily, since that's where a local EoP pays off fastest. It won't be an initial breach, but leaving it unpatched hands any foothold a clean route to SYSTEM.