Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2021-36958

Windows Print Spooler Remote Code Execution Vulnerability

Description

A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Microsoft Windows 10 Version 1507

  • 10.0.10240.0 to < 10.0.10240.19060affected

Microsoft Windows 10 Version 1607

  • 10.0.14393.0 to < 10.0.14393.4651affected

Microsoft Windows 10 Version 1809

  • 10.0.17763.0 to < 10.0.17763.2183affected

Microsoft Windows 10 Version 1809

  • 10.0.0 to < 10.0.17763.2183affected

Microsoft Windows 10 Version 1909

  • 10.0.0 to < 10.0.18363.1801affected

Microsoft Windows 10 Version 2004

  • 10.0.0 to < 10.0.19041.1237affected

Microsoft Windows 10 Version 20H2

  • 10.0.0 to < 10.0.19042.1237affected

Microsoft Windows 10 Version 21H1

  • 10.0.0 to < 10.0.19043.1237affected

Microsoft Windows 7

  • 6.1.0 to < 6.1.7601.25712affected

Microsoft Windows 7 Service Pack 1

  • 6.1.0 to < 6.1.7601.25712affected

Microsoft Windows 8.1

  • 6.3.0 to < 6.3.9600.20120affected

Microsoft Windows Server 2008 R2 Service Pack 1

  • 6.1.7601.0 to < 6.1.7601.25712affected

Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)

  • 6.1.7601.0 to < 6.1.7601.25712affected

Microsoft Windows Server 2008 Service Pack 2

  • 6.0.6003.0 to < 6.0.6003.21218affected

Microsoft Windows Server 2008 Service Pack 2 (Server Core installation)

  • 6.0.6003.0 to < 6.0.6003.21218affected

Microsoft Windows Server 2012

  • 6.2.9200.0 to < 6.2.9200.23462affected

Microsoft Windows Server 2012 (Server Core installation)

  • 6.2.9200.0 to < 6.2.9200.23462affected

Microsoft Windows Server 2012 R2

  • 6.3.9600.0 to < 6.3.9600.20120affected

Microsoft Windows Server 2012 R2 (Server Core installation)

  • 6.3.9600.0 to < 6.3.9600.20120affected

Microsoft Windows Server 2016

  • 10.0.14393.0 to < 10.0.14393.4651affected

Microsoft Windows Server 2016 (Server Core installation)

  • 10.0.14393.0 to < 10.0.14393.4651affected

Microsoft Windows Server 2019

  • 10.0.17763.0 to < 10.0.17763.2183affected

Microsoft Windows Server 2019 (Server Core installation)

  • 10.0.17763.0 to < 10.0.17763.2183affected

Microsoft Windows Server version 2004

  • 10.0.0 to < 10.0.19041.1237affected

Microsoft Windows Server version 20H2

  • 10.0.0 to < 10.0.19042.1237affected

References