Skip to content
OpenAdvisories
High MSRC-CVE-2021-34481 1 CVE

Windows Print Spooler Remote Code Execution Vulnerability

Published Jul 15, 2021 · Updated Aug 10, 2021 · Revision 2

Vendor: Microsoft

Summary

Impact: Remote Code Execution. Microsoft rating: Important. Not known to be exploited, publicly disclosed before the fix — Exploitation More Likely. Customer action: Required.

Details

Why did the security impact change from elevation of privilege to remote code execution?
We became aware of a remote attack scenario for this vulnerability and revised our assessment accordingly.
No, the vulnerability existed before the July 13, 2021 security update. We recommend that Microsoft customers install the latest security updates.
Please see KB5005652.

Security updates
10.0.17763.2114 — https://support.microsoft.com/help/5005030
10.0.18363.1734 — https://support.microsoft.com/help/5005031
10.0.19043.1165 — https://support.microsoft.com/help/5005033
10.0.10240.19022 — https://support.microsoft.com/help/5005040
10.0.14393.4583 — https://support.microsoft.com/help/5005043
6.1.7601.25685 — https://support.microsoft.com/help/5005088
6.1.7601.25685 — https://support.microsoft.com/help/5005089
6.3.9600.20094 — https://support.microsoft.com/help/5005076
6.3.9600.20094 — https://support.microsoft.com/help/5005106
6.0.6003.21192 — https://support.microsoft.com/help/5005090
6.0.6003.21192 — https://support.microsoft.com/help/5005095
6.2.9200.23435 — https://support.microsoft.com/help/5005099
6.2.9200.23435 — https://support.microsoft.com/help/5005094

Vulnerabilities 1

Revision history

  1. #2

    CVE updated to announce that Microsoft is releasing security updates for all affected versions of Windows to address this vulnerability. Other information has been updated as well, including the following: 1) Impact has been changed to Remote Code Execution 2) Executive Summary has been updated 3) FAQs have been revised.

  2. #1

    Information published.

References