Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2021-34481
HistoryJul 16, 2021 - 9:15 p.m.

CVE-2021-34481

2021-07-1621:15:00
CWE-269
[email protected]
web.nvd.nist.gov
165
In Wild
39
20
cve-2021-34481
windows
print spooler
elevation of privilege
vulnerability
nvd

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

9 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.01 Low

EPSS

Percentile

83.4%

JSON

<p>A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p>
<p><strong>UPDATE</strong> August 10, 2021: Microsoft has completed the investigation and has released security updates to address this vulnerability. Please see the Security Updates table for the applicable update for your system. We recommend that you install these updates immediately. This security update changes the Point and Print default behavior; please see <a href=“https://support.microsoft.com/help/5005652”>KB5005652</a>.</p>

VendorProductVersionCPE
microsoftwindows_10_1809*cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*
microsoftwindows_server_2019*cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
microsoftwindows_server_2019*cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
microsoftwindows_10_1909*cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:*:*
microsoftwindows_10_21h1*cpe:2.3:o:microsoft:windows_10_21h1:*:*:*:*:*:*:*:*
microsoftwindows_10_2004*cpe:2.3:o:microsoft:windows_10_2004:*:*:*:*:*:*:*:*
microsoftwindows_server_version_2004*cpe:2.3:o:microsoft:windows_server_version_2004:*:*:*:*:*:*:*:*
microsoftwindows_10_20h2*cpe:2.3:o:microsoft:windows_10_20h2:*:*:*:*:*:*:*:*
microsoftwindows_server_20h2*cpe:2.3:o:microsoft:windows_server_20h2:*:*:*:*:*:*:*:*
microsoftwindows_10_1507*cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*
Rows per page:
1-10 of 251

Social References

More

Related

githubexploit 1
nessus 8
kaspersky 2
thn 5
prion 1
hivepro 1
cnvd 1
mscve 1
threatpost 3
attackerkb 1
krebs 1
kitploit 1
malwarebytes 1
mskb 21
openvas 7
qualysblog 1
githubexploit
githubexploit
Exploit for Improper Privilege Management in Microsoft
2021-08-11 16:56:10
nessus
nessus
Windows Operating System Hardening Measure (RestrictDriverInstallationToAdministrators)
2022-02-22 00:00:00
KB5005095: Windows Server 2008 Security Update (August 2021)
2021-08-10 00:00:00
KB5005089: Windows 7 and Windows Server 2008 R2 Security Update (August 2021)
2021-08-10 00:00:00
kaspersky
kaspersky
KLA12231 PE vulnerability in Microsoft Windows
2021-07-15 00:00:00
KLA12246 PE vulnerability in Microsoft Products (ESU)
2021-07-15 00:00:00
thn
thn
Researcher Uncovers Yet Another Unpatched Windows Printer Spooler Vulnerability
2021-07-19 06:51:00
Microsoft Warns of New Unpatched Windows Print Spooler Vulnerability
2021-07-16 04:40:00
Microsoft Warns of Another Unpatched Windows Print Spooler RCE Vulnerability
2021-08-12 05:23:00
prion
prion
Remote code execution
2021-07-16 21:15:00
hivepro
hivepro
Weren’t you warned about reactivating the Print Spooler?
2021-07-18 13:12:53
cnvd
cnvd
Microsoft Windows Print Spooler Remote Code Execution Vulnerability (CNVD-2022-10026)
2021-07-19 00:00:00
mscve
mscve
Windows Print Spooler Remote Code Execution Vulnerability
2021-07-15 07:00:00
threatpost
threatpost
Microsoft: Unpatched Bug in Windows Print Spooler
2021-07-16 11:57:53
Microsoft Warns: Another Unpatched PrintNightmare Zero-Day
2021-08-12 13:19:50
Actively Exploited Windows Zero-Day Gets a Patch
2021-08-10 21:17:58
attackerkb
attackerkb
CVE-2021-34481
2021-07-16 00:00:00
krebs
krebs
Microsoft Patch Tuesday, August 2021 Edition
2021-08-10 21:12:58
kitploit
kitploit
Concealed Position - Bring Your Own Print Driver Privilege Escalation Tool
2021-09-18 11:30:00
malwarebytes
malwarebytes
PrintNightmare and RDP RCE among major issues tackled by Patch Tuesday
2021-08-11 12:16:17
mskb
mskb
August 10, 2021—KB5005095 (Security-only update)
2021-08-10 07:00:00
August 10, 2021—KB5005090 (Monthly Rollup)
2021-08-10 07:00:00
August 10, 2021—KB5005089 (Security-only update)
2021-08-10 07:00:00
openvas
openvas
Microsoft Windows Multiple Vulnerabilities (KB5005088)
2021-08-11 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB5005076)
2021-08-11 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB5005040)
2021-08-11 00:00:00
qualysblog
qualysblog
Microsoft and Adobe Patch Tuesday (August 2021) – Microsoft 51 Vulnerabilities with 7 Critical, Adobe 29 Vulnerabilities
2021-08-10 19:58:49

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

9 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.01 Low

EPSS

Percentile

83.4%

JSON
Related for CVE-2021-34481
githubexploit1nessus8kaspersky2thn5prion1hivepro1cnvd1mscve1threatpost3attackerkb1krebs1kitploit1malwarebytes1mskb21openvas7qualysblog1