CVE-2021-36958 in the critical feed json
Windows Print Spooler Remote Code Execution Vulnerability
published 2021-08-12 5 y ago modified 2026-08-10 2 mo ago also EUVD-2021-23534
- cvss
- 7.8
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 30.8%
- EPSS 30.8% chance of exploitation in 30 days, percentile 98%
- public exploits
- 0
- none known
Summary
A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
Patch / fix
- Microsoft Windows 10 Version 1507 10.0.10240.19060
- Microsoft Windows 10 Version 1607 10.0.14393.4651
- Microsoft Windows 10 Version 1809 10.0.17763.2183
- Microsoft Windows 10 Version 1909 10.0.18363.1801
- Microsoft Windows 10 Version 2004 10.0.19041.1237
- Microsoft Windows 10 Version 20H2 10.0.19042.1237
- Microsoft Windows 10 Version 21H1 10.0.19043.1237
- Microsoft Windows 7 6.1.7601.25712
- Microsoft Windows 7 Service Pack 1 6.1.7601.25712
- Microsoft Windows 8.1 6.3.9600.20120
- Microsoft Windows Server 2008 R2 Service Pack 1 6.1.7601.25712
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation) 6.1.7601.25712
- Microsoft Windows Server 2008 Service Pack 2 6.0.6003.21218
- Microsoft Windows Server 2008 Service Pack 2 (Server Core installation) 6.0.6003.21218
- Microsoft Windows Server 2012 6.2.9200.23462
- Microsoft Windows Server 2012 (Server Core installation) 6.2.9200.23462
- Microsoft Windows Server 2012 R2 6.3.9600.20120
- Microsoft Windows Server 2012 R2 (Server Core installation) 6.3.9600.20120
- Microsoft Windows Server 2016 10.0.14393.4651
- Microsoft Windows Server 2016 (Server Core installation) 10.0.14393.4651
- Microsoft Windows Server 2019 10.0.17763.2183
- Microsoft Windows Server 2019 (Server Core installation) 10.0.17763.2183
- Microsoft Windows Server version 2004 10.0.19041.1237
- Microsoft Windows Server version 20H2 10.0.19042.1237
Exploit prediction
30.79% chance of exploitation in the next 30 days, higher than 98% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 7.8 | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C |
| CNA | 3.1 | 7.8 | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 9.3 | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Affected products
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 1909
- Microsoft Windows 10 Version 2004
- Microsoft Windows 10 Version 20H2
- Microsoft Windows 10 Version 21H1
- Microsoft Windows 7
- Microsoft Windows 7 Service Pack 1
- Microsoft Windows 8.1
- Microsoft Windows Server 2008 R2 Service Pack 1
- Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
- Microsoft Windows Server 2008 Service Pack 2
- Microsoft Windows Server 2008 Service Pack 2 (Server Core installation)
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 (Server Core installation)
- Microsoft Windows Server 2012 R2
- Microsoft Windows Server 2012 R2 (Server Core installation)
- Microsoft Windows Server 2016
- Microsoft Windows Server 2016 (Server Core installation)
- Microsoft Windows Server 2019
- Microsoft Windows Server 2019 (Server Core installation)
- Microsoft Windows Server version 2004
- Microsoft Windows Server version 20H2
References
-
msrc.microsoft.com
/update-guide/vulnerability/CVE-2021-36958
vendor-advisory, patch
-
portal.msrc.microsoft.com
/en-US/security-guidance/advisory/CVE-2021-36958
patch, vendor-advisory
- kb.cert.org /vuls/id/131152
Sources
- CVE List CVE-2021-36958
- NVD CVE-2021-36958
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.