CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“2 of 2 advisories (Page 1/1)
CVE-2021-345278.8/HIGHEPSS 99.8%CISA KEV
2021-07-02

Microsoft Windows Print Spooler Remote Code Execution Vulnerability (PrintNightmare, CVE-2021-34527) Technical Advisory

[Affected Scope] Windows 7, 8.1, 10, 11 and Windows Server 2008, 2012, 2016, 2019, 2022 with the Windows Print Spooler service enabled

[Impact] An authenticated remote attacker can execute arbitrary code with SYSTEM privileges, potentially leading to full domain compromise

[Mitigation] Apply official cumulative security updates immediately, disable the Print Spooler service where not required, and harden Point and Print registry configurations

CVE-2021-16757.8/HIGHEPSS 85.3%CISA KEV
2021-06-08

Windows Print Spooler Remote Code Execution and Privilege Escalation Vulnerability (PrintNightmare - CVE-2021-1675)

[Affected Scope] All Windows and Windows Server operating systems with the Windows Print Spooler (spoolsv.exe) service enabled

[Impact] Authenticated local or remote attackers can execute arbitrary code with SYSTEM privileges, potentially leading to full Domain Controller compromise

[Mitigation] Apply official Microsoft security patches immediately, or disable the Print Spooler service and block remote printing via Group Policy

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse