CVE-2021-36958

—

CVSS 3.1

7.8 high

EPSS

31%p98

Published

Aug 12, 2021 (Aug 12, 2021)

Modified

Aug 10, 2026

Description

A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.

Vendors: microsoft
Products: windows
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (30.6%)

In the news9 stories

Magniber Ransomware operators use PrintNightmare exploits

Security AffairsOct 31, 17:48 UTC · Oct 31, 2022Ransomware CVE-2021-1675 CVE-2021-34527 CVE-2021-36958

IT threat evolution in Q3 2021. PC statistics

Kaspersky SecurelistNov 26, 12:00 UTC · Nov 26, 2021Ransomware CVE-2019-7481 CVE-2021-1675 CVE-2021-34527+4 CVEs

Experts Expose Secrets of Conti Ransomware Group That Made 25 Million from Victims

The Hacker NewsNov 20, 15:13 UTC · Nov 20, 2021Ransomware CVE-2021-1675 CVE-2021-34527 CVE-2021-36958+2 CVEs

Microsoft confirms another Windows Print Spooler bug, offers workaround (CVE-2021-36958)

Help Net SecurityAug 13, 00:00 UTC · Aug 13, 2021Vulnerability CVE-2021-36958

Microsoft Warns of Another Unpatched Windows Print Spooler RCE Vulnerability

The Hacker NewsAug 12, 06:19 UTC · Aug 12, 2021Vulnerability CVE-2021-36958 CVE-2021-34481