CVE-2021-34527

HIGHCVSS 8.8Known Exploited

CISA Known Exploited Vulnerability

Reference CISA's ED 21-04 (https://www.cisa.gov/news-events/directives/ed-21-04-mitigate-windows-print-spooler-service-vulnerability) for further guidance and requirements. Note: The due date for addressing this vulnerability aligns with the requirements outlined in ED 21-04. https://nvd.nist.gov/vuln/detail/CVE-2021-34527

Remediation deadline: May 3, 2022

Ransomware use: Known

Description

Microsoft Windows Print Spooler contains an unspecified vulnerability due to the Windows Print Spooler service improperly performing privileged file operations. Successful exploitation allows an attacker to perform remote code execution with SYSTEM privileges. The vulnerability is also known under the moniker of PrintNightmare.

Timeline

Published:July 2nd, 2021 10:15 PM

Last modified:August 10th, 2026 8:15 PM

Added to KEV:November 3rd, 2021

CVSS Scoring

CVSS v3: 8.8 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2: 9.0

Affected Software

From NVD CPE configuration data

Vendors

microsoft

Products

windows_10_1507windows_10_1607windows_10_1809windows_10_20h2windows_10_21h2windows_10_22h2windows_11_21h2windows_11_22h2windows_rt_8.1windows_server_2008windows_server_2012windows_server_2016windows_server_2019windows_server_2022windows_server_20h2

References & Reports

Advisories, patches, and third-party reports

Source: NIST NVD · Data may lag official sources by up to one minute