CVE-2021-34527

CISA KEV RANSOMWARE

ACT NOW Priority: 0.00 BB Relevance: 0/100

Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

Microsoft Windows Print Spooler contains an unspecified vulnerability due to the Windows Print Spooler service improperly performing privileged file operations. Successful exploitation allows an attacker to perform remote code execution with SYSTEM privileges. The vulnerability is also known under the moniker of PrintNightmare.

CISA Known Exploited Vulnerability

Vendor / Product Microsoft — Windows

Date Added 2021-11-03

Remediation Due 2022-05-03

Ransomware Use CONFIRMED

Reference CISA's ED 21-04 (https://www.cisa.gov/news-events/directives/ed-21-04-mitigate-windows-print-spooler-service-vulnerability) for further guidance and requirements. Note: The due date for addressing this vulnerability aligns with the requirements outlined in ED 21-04. https://nvd.nist.gov/vuln/detail/CVE-2021-34527

Affected Software (17)

Vendor	Product	Version
microsoft	windows_10_1507	< 10.0.10240.18969
microsoft	windows_10_1607	< 10.0.14393.4470
microsoft	windows_10_1809	< 10.0.17763.2029
microsoft	windows_10_20h2	< 10.0.19042.1083
microsoft	windows_10_21h2	< 10.0.19044.1415
microsoft	windows_10_22h2	< 10.0.19045.2251
microsoft	windows_11_21h2	< 10.0.22000.318
microsoft	windows_11_22h2	< 10.0.22621.674
microsoft	windows_rt_8.1	-
microsoft	windows_server_2008	-
microsoft	windows_server_2008	r2
microsoft	windows_server_2012	-
microsoft	windows_server_2012	r2
microsoft	windows_server_2016	< 10.0.14393.4470
microsoft	windows_server_2019	< 10.0.17763.2029
microsoft	windows_server_2022	< 10.0.20348.230
microsoft	windows_server_20h2	< 10.0.19042.1083