CVE-2021-36958

high · 7.8

A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.

7.8

CVSS

30.6%

EPSS (exploit prob.)

98th

EPSS percentile

2021-08-12

Published

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Vendor	Product	Affected versions
microsoft	windows	all versions

Check a specific version with /api/v1/cve/match.

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-36958
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36958
https://www.kb.cert.org/vuls/id/131152

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2021-36958