CVE-2021-36958

CVE-2021-36958

High · published August 12, 2021

CVSS v3.1
7.8
EPSS
31%
Percentile
98.3
In the wild
Unconfirmed
What it is

A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.30794 · 98.3th percentile
Published
2021-08-12T22:15Z
Affected products (1)
ProductVersionsFixed in
microsoft/windowsall versions—
References (3)
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-36958 · [email protected]https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36958 · af854a3a-2127-422b-91ae-364da2661108https://www.kb.cert.org/vuls/id/131152 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 12 AUG 18:12Z
    Windows Print Spooler Remote Code Execution Vulnerability
    cvelistv5