CVE-2021-34481
A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. UPDATE August 10, 2021: Microsoft has completed the investigation and has released security updates to address this vulnerability. Please see the Security Updates table for the applicable update for your system. We recommend that you install these updates immediately. This security update changes the Point and Print default behavior; please see KB5005652.
Published:Jul 16, 2021
Last Modified:Aug 10, 2026
EPS:Jul 16, 2021
EPSS Score:0.45423
CVSS Score:8.8
Affected Products
Vendor
Product
Action
Vendor
Microsoft
Product
Windows 10
Microsoft
Windows 10
Vendor
Microsoft
Product
Windows 10 1507
Microsoft
Windows 10 1507
Vendor
Microsoft
Product
Windows 10 1607
Microsoft
Windows 10 1607
Vendor
Microsoft
Product
Windows 10 1809
Microsoft
Windows 10 1809
Vendor
Microsoft
Product
Windows 10 1909
Microsoft
Windows 10 1909
Vendor
Microsoft
Product
Windows 10 20H2
Microsoft
Windows 10 20H2
Vendor
Microsoft
Product
Windows 10 21H1
Microsoft
Windows 10 21H1
Vendor
Microsoft
Product
Windows 7
Microsoft
Windows 7
Vendor
Microsoft
Product
Windows 8.1
Microsoft
Windows 8.1
Vendor
Microsoft
Product
Windows Rt 8.1
Microsoft
Windows Rt 8.1
Vendor
Microsoft
Product
Windows Server 2004
Microsoft
Windows Server 2004
Vendor
Microsoft
Product
Windows Server 2008
Microsoft
Windows Server 2008
Vendor
Microsoft
Product
Windows Server 2008 R2
Microsoft
Windows Server 2008 R2
Vendor
Microsoft
Product
Windows Server 2008 Sp2
Microsoft
Windows Server 2008 Sp2
Vendor
Microsoft
Product
Windows Server 2012
Microsoft
Windows Server 2012
Vendor
Microsoft
Product
Windows Server 2012 R2
Microsoft
Windows Server 2012 R2
Vendor
Microsoft
Product
Windows Server 2016
Microsoft
Windows Server 2016
Vendor
Microsoft
Product
Windows Server 2019
Microsoft
Windows Server 2019
Vendor
Microsoft
Product
Windows Server 20H2
Microsoft
Windows Server 20H2
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Related CVEs
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
