CVE-2021-1675

critical-risk

Published 2021-06-08

Windows Print Spooler Remote Code Execution Vulnerability

Do I need to act?

94.3% chance of exploitation in next 30 days

EPSS score — higher than 6% of all CVEs

CISA KEV: actively exploited in the wild

On the Known Exploited Vulnerabilities catalog — federal agencies must patch

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 7.8/10 High

LOCAL / LOW complexity

Windows 10 1507

Windows 10 1607

Windows 10 1809

Windows 10 1909

Windows 10 2004

Windows 10 20H2

Windows 10 21H1

Windows 7

Windows 8.1

Windows Rt 8.1

Windows Server 2004

Windows Server 2008

Windows Server 2012

Windows Server 2016

Windows Server 2019

Microsoft

Third Party Advisory http://packetstormsecurity.com/files/163349/Microsoft-PrintNightmare-Proof-Of-Co...

Third Party Advisory http://packetstormsecurity.com/files/163351/PrintNightmare-Windows-Spooler-Servi...

Exploit http://packetstormsecurity.com/files/167261/Print-Spooler-Remote-DLL-Injection.h...

Patch https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1675

Third Party Advisory https://www.kb.cert.org/vuls/id/383432

Third Party Advisory http://packetstormsecurity.com/files/163349/Microsoft-PrintNightmare-Proof-Of-Co...

Third Party Advisory http://packetstormsecurity.com/files/163351/PrintNightmare-Windows-Spooler-Servi...

Exploit http://packetstormsecurity.com/files/167261/Print-Spooler-Remote-DLL-Injection.h...

Patch https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1675

Third Party Advisory https://www.kb.cert.org/vuls/id/383432

US Government Resource https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-...

/ 100

critical-risk

Severity 24/34 · High

Exploitability 27/34 · High

Exposure 19/34 · Moderate