CVE-2021-36958

HighCVSS 7.8/10Last modified Aug 10, 2026

Description

A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected software

VendorProductVersions
MicrosoftWindows 10 Version 1507>= 10.0.10240.0, < 10.0.10240.19060
MicrosoftWindows 10 Version 1607>= 10.0.14393.0, < 10.0.14393.4651
MicrosoftWindows 10 Version 1809>= 10.0.17763.0, < 10.0.17763.2183
MicrosoftWindows 10 Version 1809>= 10.0.0, < 10.0.17763.2183
MicrosoftWindows 10 Version 1909>= 10.0.0, < 10.0.18363.1801
MicrosoftWindows 10 Version 2004>= 10.0.0, < 10.0.19041.1237
MicrosoftWindows 10 Version 20H2>= 10.0.0, < 10.0.19042.1237
MicrosoftWindows 10 Version 21H1>= 10.0.0, < 10.0.19043.1237
MicrosoftWindows 7>= 6.1.0, < 6.1.7601.25712
MicrosoftWindows 7 Service Pack 1>= 6.1.0, < 6.1.7601.25712
MicrosoftWindows 8.1>= 6.3.0, < 6.3.9600.20120
MicrosoftWindows Server 2008 R2 Service Pack 1>= 6.1.7601.0, < 6.1.7601.25712
MicrosoftWindows Server 2008 R2 Service Pack 1 (Server Core installation)>= 6.1.7601.0, < 6.1.7601.25712
MicrosoftWindows Server 2008 Service Pack 2>= 6.0.6003.0, < 6.0.6003.21218
MicrosoftWindows Server 2008 Service Pack 2 (Server Core installation)>= 6.0.6003.0, < 6.0.6003.21218
MicrosoftWindows Server 2012>= 6.2.9200.0, < 6.2.9200.23462
MicrosoftWindows Server 2012 (Server Core installation)>= 6.2.9200.0, < 6.2.9200.23462
MicrosoftWindows Server 2012 R2>= 6.3.9600.0, < 6.3.9600.20120
MicrosoftWindows Server 2012 R2 (Server Core installation)>= 6.3.9600.0, < 6.3.9600.20120
MicrosoftWindows Server 2016>= 10.0.14393.0, < 10.0.14393.4651
MicrosoftWindows Server 2016 (Server Core installation)>= 10.0.14393.0, < 10.0.14393.4651
MicrosoftWindows Server 2019>= 10.0.17763.0, < 10.0.17763.2183
MicrosoftWindows Server 2019 (Server Core installation)>= 10.0.17763.0, < 10.0.17763.2183
MicrosoftWindows Server version 2004>= 10.0.0, < 10.0.19041.1237
MicrosoftWindows Server version 20H2>= 10.0.0, < 10.0.19042.1237

References

Timeline

Published
Aug 12, 2021
Last modified
Aug 10, 2026
NVD status
Modified

Related CVEs from 2021