9.8
CRITICAL
CVE-2021-34481
Windows Print Spooler Remote Code Execution Vulnerability
Description

<p>A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p><strong>UPDATE</strong> August 10, 2021: Microsoft has completed the investigation and has released security updates to address this vulnerability. Please see the Security Updates table for the applicable update for your system. We recommend that you install these updates immediately. This security update changes the Point and Print default behavior; please see <a href="https://support.microsoft.com/help/5005652">KB5005652</a>.</p>

INFO

Published Date :

July 16, 2021, 9:15 p.m.

Last Modified :

Dec. 28, 2023, 11:15 p.m.

Source :

[email protected]

Remotely Exploitable :

Yes !

Impact Score :

5.9

Exploitability Score :

3.9
Public PoC/Exploit Available at Github

CVE-2021-34481 has a 9 public PoC/Exploit available at Github. Go to the Public Exploits tab to see the list.

Affected Products

The following products are affected by CVE-2021-34481 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID Vendor Product Action
1 Microsoft windows_10
2 Microsoft windows_7
3 Microsoft windows_8.1
4 Microsoft windows_rt_8.1
5 Microsoft windows_server_2008
6 Microsoft windows_server_2012
7 Microsoft windows_server_2016
8 Microsoft windows_server_2019
9 Microsoft windows_10_1607
10 Microsoft windows_10_1809
11 Microsoft windows_10_20h2
12 Microsoft windows_10_1507
13 Microsoft windows_10_21h1
14 Microsoft windows_10_1909
15 Microsoft windows_server_20h2
16 Microsoft windows_server_2004
17 Microsoft windows_server_2012_r2
18 Microsoft windows_server_2008_r2
19 Microsoft windows_server_2008_sp2
: Total Affected Vendor : 1 | Products : 19
References to Advisories, Solutions, and Tools

Here, you will find a curated list of external links that provide in-depth information, practical solutions, and valuable tools related to CVE-2021-34481.

URL Resource
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34481 Patch Vendor Advisory

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Profile Photo
X-3306/my-all-notes

it is my all notes about topics I've been learned in 4/5 years (mostly hacking)

basics bugbounty c cpp ctfs hacking hacking-tools malware malware-analysis malware-development python reverse-engineering sql-injection xss

Updated: 3 months, 1 week ago
4 stars 2 fork 2 watcher
Born at : Sept. 29, 2023, 4:06 p.m. This repo has been linked 5 different CVEs too.
Profile Photo
orgTestCodacy11KRepos110MB/repo-8984-concealed_position

None

C++

Updated: 1 year, 9 months ago
0 stars 0 fork 0 watcher
Born at : Jan. 31, 2023, 9:12 p.m. This repo has been linked 5 different CVEs too.
Profile Photo
clearbluejar/cve-markdown-charts

A simple tool to create mermaid js markdown charts from CVE IDs and CVE keyword searches.

cve markdown mermaidjs cvrf

Python

Updated: 5 months, 2 weeks ago
40 stars 1 fork 1 watcher
Born at : Feb. 18, 2022, 2:43 a.m. This repo has been linked 46 different CVEs too.
Profile Photo
cquresphere/Remote-Install-Printers

Remote install printers from print server to local Windows system

PowerShell

Updated: 2 years, 7 months ago
1 stars 0 fork 0 watcher
Born at : Oct. 26, 2021, 8:46 a.m. This repo has been linked 1 different CVEs too.
Profile Photo
vpn28/CVE-2021-34481

Check patch for CVE-2021-34481

PowerShell

Updated: 1 year, 6 months ago
1 stars 1 fork 1 watcher
Born at : Aug. 11, 2021, 4:56 p.m. This repo has been linked 1 different CVEs too.
Profile Photo
cfalta/MicrosoftWontFixList

A list of vulnerabilities or design flaws that Microsoft does not intend to fix. Since the number is growing, I decided to make a list. This list covers only vulnerabilities that came up in July 2021 (and SpoolSample ;-))

microsoft activedirectory security-tools redteam blueteam

Updated: 3 months ago
931 stars 94 fork 94 watcher
Born at : July 28, 2021, 6:09 p.m. This repo has been linked 8 different CVEs too.
Profile Photo
SSBhaumik/Printnightmare-safetool

Windows PrintNightmare vulnerability mitigation tool. A tool to start or stop print spooler service with ease for immediate workaround on system flaw. Keep spooler service "ON" during use only. "DISABLE" service startup. CODE BY SRINATH S BHAUMIK

Batchfile PowerShell

Updated: 2 months, 3 weeks ago
1 stars 1 fork 1 watcher
Born at : July 27, 2021, 5 p.m. This repo has been linked 2 different CVEs too.
Profile Photo
jacob-baines/concealed_position

Bring your own print driver privilege escalation tool

C++

Updated: 2 months, 2 weeks ago
241 stars 43 fork 43 watcher
Born at : June 15, 2021, 12:39 a.m. This repo has been linked 5 different CVEs too.
Profile Photo
n0-traces/cve_monitor

Automatic monitor github cve using Github Actions

Python

Updated: 1 month, 4 weeks ago
1 stars 56 fork 56 watcher
Born at : April 7, 2021, 11:16 a.m. This repo has been linked 1007 different CVEs too.

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2021-34481 vulnerability anywhere in the article.

  • Cybersecurity News
Microsoft Addresses Critical Zero-Day Vulnerabilities in November Patch Tuesday

Microsoft’s November 2024 Patch Tuesday addresses 92 vulnerabilities, including four critical and 83 deemed “important.” Notably, this release includes patches for four zero-day vulnerabilities active ... Read more

Published Date: Nov 13, 2024 (4 days, 11 hours ago)
CVE-2024-49056 CVE-2024-49040 CVE-2024-49039 CVE-2024-49033 CVE-2024-49019 CVE-2024-43642 CVE-2024-43639 CVE-2024-43636 CVE-2024-43630 CVE-2024-43625 ...+7 more CVE
  • Cybersecurity News
0patch Uncovers and Patches New Windows Zero-Day Vulnerability, Microsoft Scrambles to Re-Fix Flaw

Security researchers at 0patch have discovered a new zero-day vulnerability in Microsoft Windows, exposing users to potential credential theft. This revelation comes on the heels of Microsoft’s attemp ... Read more

Published Date: Oct 30, 2024 (2 weeks, 4 days ago)
CVE-2024-47575 CVE-2024-47824 CVE-2024-47080 CVE-2024-31449 CVE-2024-45200 CVE-2024-38030 CVE-2024-21320 CVE-2021-34481
  • Cybersecurity News
Microsoft’s October 2024 Patch Tuesday: Zero-Day Exploits and Critical Vulnerabilities Patched

Microsoft’s October 2024 Patch Tuesday delivered a crucial set of security updates, addressing a total of 121 vulnerabilities across its ecosystem. This includes three critical vulnerabilities and 114 ... Read more

Published Date: Oct 09, 2024 (1 month, 1 week ago)
CVE-2024-43615 CVE-2024-43609 CVE-2024-43583 CVE-2024-43582 CVE-2024-43581 CVE-2024-43573 CVE-2024-43572 CVE-2024-43560 CVE-2024-43502 CVE-2024-43488 ...+8 more CVE
  • Cybersecurity News
0-Day Flaw CVE-2024-38200 in Microsoft Office Exposes NTLMv2 Hashes: PoC Exploit Released

A discovered zero-day vulnerability is putting Microsoft Office users at risk. Security researcher Metin Yunus Kandemir recently published the technical details and a proof-of-concept (PoC) exploit th ... Read more

Published Date: Oct 03, 2024 (1 month, 2 weeks ago)
CVE-2024-29847 CVE-2024-8190 CVE-2024-38200 CVE-2024-38080 CVE-2024-26230 CVE-2023-27532 CVE-2021-34481
  • Cybersecurity News
New Zero-Day Emerges After Microsoft Patch Tuesday: CVE-2024-43461 Targets Windows MSHTML

IE and a promote window dialog appear when the victim double-clicks on the .url file | Image: Check PointIn an unexpected turn of events, Microsoft has revised its September 2024 Patch Tuesday securit ... Read more

Published Date: Sep 16, 2024 (2 months ago)
CVE-2024-29847 CVE-2024-43491 CVE-2024-43461 CVE-2024-38226 CVE-2024-38217 CVE-2024-38014 CVE-2024-42024 CVE-2024-42019 CVE-2024-45321 CVE-2024-38112 ...+3 more CVE

The following table lists the changes that have been made to the CVE-2021-34481 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • CVE Modified by [email protected]

    May. 14, 2024

    Action Type Old Value New Value
  • CVE Modified by [email protected]

    Dec. 28, 2023

    Action Type Old Value New Value
    Changed Description Windows Print Spooler Elevation of Privilege Vulnerability <p>A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p><strong>UPDATE</strong> August 10, 2021: Microsoft has completed the investigation and has released security updates to address this vulnerability. Please see the Security Updates table for the applicable update for your system. We recommend that you install these updates immediately. This security update changes the Point and Print default behavior; please see <a href="https://support.microsoft.com/help/5005652">KB5005652</a>.</p>
    Added CVSS V3.1 Microsoft Corporation AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • Reanalysis by [email protected]

    Apr. 11, 2023

    Action Type Old Value New Value
    Removed CVSS V2 NIST (AV:L/AC:L/Au:N/C:P/I:P/A:P)
    Added CVSS V2 NIST (AV:N/AC:L/Au:N/C:P/I:P/A:P)
    Removed CVSS V3.1 NIST AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    Added CVSS V3.1 NIST AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
  • Reanalysis by [email protected]

    Aug. 09, 2021

    Action Type Old Value New Value
    Changed CPE Configuration OR *cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* OR *cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:* *cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:* *cpe:2.3:o:microsoft:windows_10:21h1:*:*:*:*:*:*:* *cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:* *cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:* *cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:* *cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:* *cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:* *cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:* *cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:* *cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:* *cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:* *cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:* *cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:* *cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:* *cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*
  • Initial Analysis by [email protected]

    Jul. 22, 2021

    Action Type Old Value New Value
    Added CVSS V2 NIST (AV:L/AC:L/Au:N/C:P/I:P/A:P)
    Added CVSS V3.1 NIST AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    Changed Reference Type https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34481 No Types Assigned https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-34481 Patch, Vendor Advisory
    Added CWE NIST CWE-269
    Added CPE Configuration OR *cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.
CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2021-34481 is associated with the following CWEs:

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2021-34481 weaknesses.

Exploit Prediction

EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days.

1.48 }} 0.16%

score

0.87162

percentile

CVSS31 - Vulnerability Scoring System
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
: