CVE-2021-36958

CVSS 3.1: 7.8 high
EPSS: 31%p98
Published: Aug 12, 2021 · Aug 12, 2021
Modified: Aug 10, 2026

Analyze CVE-2021-36958 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.

Vendors: microsoft

Products: windows

Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (30.6%)

In the news

9 stories

Magniber Ransomware operators use PrintNightmare exploits

Security AffairsOct 31, 17:48 UTC · Oct 31, 2022RansomwareCVE-2021-1675 CVE-2021-34527 CVE-2021-369582 · 1 read

IT threat evolution in Q3 2021. PC statistics

Kaspersky SecurelistNov 26, 12:00 UTC · Nov 26, 2021RansomwareCVE-2019-7481 CVE-2021-1675 CVE-2021-34527+43 · 1 read

Experts Expose Secrets of Conti Ransomware Group That Made 25 Million from Victims

The Hacker NewsNov 20, 15:13 UTC · Nov 20, 2021RansomwareCVE-2021-1675 CVE-2021-34527 CVE-2021-36958+22 · 1 read

Microsoft warns of a new unpatched Windows Print Spooler RCE zero

Security AffairsAug 12, 07:52 UTC · Aug 12, 2021VulnerabilityCVE-2021-369582 · 1 read

Microsoft confirms another Windows Print Spooler bug, offers workaround (CVE-2021-36958)

Help Net SecurityAug 13, 00:00 UTC · Aug 13, 2021VulnerabilityCVE-2021-369582 · 1 read

Microsoft Warns of Another Unpatched Windows Print Spooler RCE Vulnerability

The Hacker NewsAug 12, 06:19 UTC · Aug 12, 2021VulnerabilityCVE-2021-36958 CVE-2021-344811 · 1 read