CVE-2021-36958

A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or...

CVE-2021-36947

Windows Print Spooler Remote Code Execution Vulnerability...

CVE-2021-34483

Windows Print Spooler Elevation of Privilege Vulnerability...

Remote code execution

Windows Print Spooler Remote Code Execution Vulnerability...

Privilege escalation

Windows Print Spooler Elevation of Privilege Vulnerability...

Remote code execution

Windows Print Spooler Remote Code Execution Vulnerability...

CVE-2021-36936

Windows Print Spooler Remote Code Execution Vulnerability...

CVE-2021-36958

CVE-2021-36958 is a Windows Print Spooler RCE vulnerability where privileged file operations allow an attacker to execute code with SYSTEM privileges. Exploitation is described as local (with user interaction) in the CVE data, and Microsoft issued a fix as part of the PrintNightmare remediation. ...

CVE-2021-36958 Windows Print Spooler Remote Code Execution Vulnerability

...

CVE-2021-36947 Windows Print Spooler Remote Code Execution Vulnerability

...

CVE-2021-36947

CVE-2021-36947 is listed in the NCSC vulnerability record as a Windows Print Spooler Component vulnerability with the impact: Execute random code. The connected documents do not provide concrete technical details on the root cause, affected subcomponents, specific versions, exploit scenarios, or ...

CVE-2021-36936 Windows Print Spooler Remote Code Execution Vulnerability

...

CVE-2021-36936

Technical details about CVE-2021-36936 are not publicly provided in the connected documents. No vendor/product/version specifics or remediation steps are present here. Monitor for updates from official advisories and trusted security trackers.

CVE-2021-36936 Windows Print Spooler Remote Code Execution Vulnerability

...

CVE-2021-34483

CVE-2021-34483 is a Windows Print Spooler elevation of privileges vulnerability. NVD lists CVSS v3.1: LOCAL, LOW complexity, PRIV: LOW, UI: NONE, with HIGH impact to C/I/A (base 7.8). CVSS v2: LOCAL, LOW, C/P/I/P/A/P (base 4.6). The exact root cause and patched/affected versions are not detailed ...

CVE-2021-34483 Windows Print Spooler Elevation of Privilege Vulnerability

...

Popular Attack Surfaces, August 2021: What You Need to Know

See the Updates section at the end of this post for new information as it comes to light. Whether you attended virtually, IRL, or not at all, Black Hat and DEF CON have officially wrapped, and security folks’ brains are replete with fresh information on new and some not-so-new vulnerabilities and...

Microsoft’s PrintNightmare continues, shrugs off Patch Tuesday fixes

I doubt if there has ever been a more appropriate nickname for a vulnerable service than PrintNightmare. There must be a whole host of people in Redmond having nightmares about the Windows Print Spooler service by now. PrintNightmare is the name of a set of vulnerabilities that allow a standard...

Microsoft Warns of Another Unpatched Windows Print Spooler RCE Vulnerability

A day after releasing Patch Tuesday updates, Microsoft acknowledged yet another remote code execution vulnerability in the Windows Print Spooler component, adding that it's working to remediate the issue in an upcoming security update. Tracked as CVE-2021-36958 CVSS score: 7.3, the unpatched flaw...

Microsoft Windows Print Spooler Remote Code Execution Vulnerability (CNVD-2022-10025)

Microsoft Windows Print Spooler is a print backend processor component of Microsoft Corporation USA.A remote code execution vulnerability exists in Microsoft Windows Print Spooler, which can be exploited by attackers to run malicious code on the system...