Remote code execution

A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or...

CVE-2021-36947

Windows Print Spooler Remote Code Execution Vulnerability...

Remote code execution

Windows Print Spooler Remote Code Execution Vulnerability...

Privilege escalation

Windows Print Spooler Elevation of Privilege Vulnerability...

CVE-2021-36958

CVE-2021-36958 is a Windows Print Spooler RCE vulnerability where privileged file operations allow an attacker to execute code with SYSTEM privileges. Exploitation is described as local (with user interaction) in the CVE data, and Microsoft issued a fix as part of the PrintNightmare remediation. ...

CVE-2021-36958 Windows Print Spooler Remote Code Execution Vulnerability

...

CVE-2021-36947 Windows Print Spooler Remote Code Execution Vulnerability

...

CVE-2021-36947

CVE-2021-36947 is listed in the NCSC vulnerability record as a Windows Print Spooler Component vulnerability with the impact: Execute random code. The connected documents do not provide concrete technical details on the root cause, affected subcomponents, specific versions, exploit scenarios, or ...

CVE-2021-36936 Windows Print Spooler Remote Code Execution Vulnerability

...

CVE-2021-36936 Windows Print Spooler Remote Code Execution Vulnerability

...

CVE-2021-36936

Technical details about CVE-2021-36936 are not publicly provided in the connected documents. No vendor/product/version specifics or remediation steps are present here. Monitor for updates from official advisories and trusted security trackers.

CVE-2021-34483 Windows Print Spooler Elevation of Privilege Vulnerability

...

CVE-2021-34483

CVE-2021-34483 is a Windows Print Spooler elevation of privileges vulnerability. NVD lists CVSS v3.1: LOCAL, LOW complexity, PRIV: LOW, UI: NONE, with HIGH impact to C/I/A (base 7.8). CVSS v2: LOCAL, LOW, C/P/I/P/A/P (base 4.6). The exact root cause and patched/affected versions are not detailed ...

Popular Attack Surfaces, August 2021: What You Need to Know

See the Updates section at the end of this post for new information as it comes to light. Whether you attended virtually, IRL, or not at all, Black Hat and DEF CON have officially wrapped, and security folks’ brains are replete with fresh information on new and some not-so-new vulnerabilities and...

Microsoft’s PrintNightmare continues, shrugs off Patch Tuesday fixes

I doubt if there has ever been a more appropriate nickname for a vulnerable service than PrintNightmare. There must be a whole host of people in Redmond having nightmares about the Windows Print Spooler service by now. PrintNightmare is the name of a set of vulnerabilities that allow a standard...

Microsoft Warns of Another Unpatched Windows Print Spooler RCE Vulnerability

A day after releasing Patch Tuesday updates, Microsoft acknowledged yet another remote code execution vulnerability in the Windows Print Spooler component, adding that it's working to remediate the issue in an upcoming security update. Tracked as CVE-2021-36958 CVSS score: 7.3, the unpatched flaw...

Microsoft Windows Print Spooler Remote Code Execution Vulnerability (CNVD-2021-91637)

Microsoft Windows is an operating system for personal devices, and Microsoft Windows Server is a server operating system. Windows Print Spooler is one of the print backend processors, and a remote code execution vulnerability exists in Microsoft Windows Print Spooler. No details of the...

Microsoft Windows Print Spooler Remote Code Execution Vulnerability (CNVD-2022-10025)

Microsoft Windows Print Spooler is a print backend processor component of Microsoft Corporation USA.A remote code execution vulnerability exists in Microsoft Windows Print Spooler, which can be exploited by attackers to run malicious code on the system...

Vulnerability found in Microsoft Printer Spooler service

A vulnerability has been found in the Print Spooler service of Microsoft Windows. A local malicious person without administrator privileges can exploit this vulnerability by connecting to a rogue print server. From this print server, a printer driver is then installed. Although the driver should...

Last Week’s Security News: Black Hat Pwnie Awards, iPhone Checks Photos, Evil Windows Print Server, Cisco VPN Routers Takeovers

Hello everyone! Last Weeks Security News, August 1 - August 8. Black Hat Pwnie Awards Last week was more quiet than normal with Black Hat USA and DEF CON security conferences. I would like to start with the Pwnie Awards, which are held annually at Black Hat. Its like an Oscar or Tony in the...