CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Microsoft Windows Print Spooler Remote Code Execution Vulnerability (PrintNightmare, CVE-2021-34527) Technical Advisory
[Affected Scope] Windows 7, 8.1, 10, 11 and Windows Server 2008, 2012, 2016, 2019, 2022 with the Windows Print Spooler service enabled
[Impact] An authenticated remote attacker can execute arbitrary code with SYSTEM privileges, potentially leading to full domain compromise
[Mitigation] Apply official cumulative security updates immediately, disable the Print Spooler service where not required, and harden Point and Print registry configurations
Windows Print Spooler Remote Code Execution and Privilege Escalation Vulnerability (PrintNightmare - CVE-2021-1675)
[Affected Scope] All Windows and Windows Server operating systems with the Windows Print Spooler (spoolsv.exe) service enabled
[Impact] Authenticated local or remote attackers can execute arbitrary code with SYSTEM privileges, potentially leading to full Domain Controller compromise
[Mitigation] Apply official Microsoft security patches immediately, or disable the Print Spooler service and block remote printing via Group Policy