High · published July 3, 2021
CVSS calls it high at 8.8. It is confirmed in active exploitation. It sits in the 100.0th percentile for exploit probability.
🚨 The Print Spooler service is a gaping hole in Windows, letting attackers run code with SYSTEM privileges like a VIP crashing a high-security event! ⚡ Think of the Print Spooler like a restaurant kitchen where everyone has access to the back room — an attacker can just waltz in and change the menu without anyone noticing! 🍽️ This vulnerability is a recipe for disaster: once exploited, an attacker could install new programs, ransack your data, or even create new user accounts — effectively giving them the keys to your entire system. The potential for chaos is absolutely devastating!
Think of the Print Spooler like a restaurant kitchen where everyone has access to the back room — an attacker can just waltz in and change the menu without anyone noticing! 🍽️ CVE-2021-34527 allows remote code execution due to improper privileged operations performed by the Windows Print Spooler service, enabling attackers to execute arbitrary code as the SYSTEM user.
This vulnerability is a recipe for disaster: once exploited, an attacker could install new programs, ransack your data, or even create new user accounts — effectively giving them the keys to your entire system. The potential for chaos is absolutely devastating! Immediate action is crucial! Update your systems to the latest versions, specifically for Windows Server 2012, Windows Server 2016, and Windows 10, Version 1607. Also, ensure the registry settings for the Print Spooler are correctly set to secure values (0 or not defined). You've got this! By following these steps, you'll patch that hole and secure your system in no time. 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| microsoft/windows_10_1507 | < 10.0.10240.18969 | 10.0.10240.18969 |
| microsoft/windows_10_1607 | < 10.0.14393.4470 | 10.0.14393.4470 |
| microsoft/windows_10_1809 | < 10.0.17763.2029 | 10.0.17763.2029 |
| microsoft/windows_10_20h2 | < 10.0.19042.1083 | 10.0.19042.1083 |
| microsoft/windows_10_21h2 | < 10.0.19044.1415 | 10.0.19044.1415 |
| microsoft/windows_10_22h2 | < 10.0.19045.2251 | 10.0.19045.2251 |
| microsoft/windows_11_21h2 | < 10.0.22000.318 | 10.0.22000.318 |
| microsoft/windows_11_22h2 | < 10.0.22621.674 | 10.0.22621.674 |
| microsoft/windows_rt_8.1 | all versions | — |
| microsoft/windows_server_2008 | all versions | — |
| microsoft/windows_server_2008 | all versions | — |
| microsoft/windows_server_2012 | all versions | — |
| microsoft/windows_server_2012 | all versions | — |
| microsoft/windows_server_2016 | < 10.0.14393.4470 | 10.0.14393.4470 |
| microsoft/windows_server_2019 | < 10.0.17763.2029 | 10.0.17763.2029 |
| microsoft/windows_server_2022 | < 10.0.20348.230 | 10.0.20348.230 |
| microsoft/windows_server_20h2 | < 10.0.19042.1083 | 10.0.19042.1083 |