CVE-2021-36958

highpriority · attend · 48EPSS 0.308 · 98 %ileEURUUS

grimoire priorityP1 · Urgent

Exploitable?

—

no known exploitation

Likely / severe?

30.8% (98th) EPSS

CVSS 9.3 · high

Is it mine?

128 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · fstec_bdu · msrc_csaf

EPSS · scored 2026-10-27

A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

FixedWindows 10 Version 1607 for 32-bit Systemsmsrc_csaf
10.0.14393.4651:Security Update:https://support.microsoft.com/help/5005573
https://support.microsoft.com/help/5005573
FixedWindows 10 Version 1607 for x64-based Systemsmsrc_csaf
10.0.14393.4651:Security Update:https://support.microsoft.com/help/5005573
https://support.microsoft.com/help/5005573
FixedWindows 10 Version 1809 for 32-bit Systemsmsrc_csaf
10.0.17763.2183:Security Update:https://support.microsoft.com/help/5005568
https://support.microsoft.com/help/5005568
FixedWindows 10 Version 1809 for ARM64-based Systemsmsrc_csaf
10.0.17763.2183:Security Update:https://support.microsoft.com/help/5005568
https://support.microsoft.com/help/5005568
FixedWindows 10 Version 1809 for x64-based Systemsmsrc_csaf
10.0.17763.2183:Security Update:https://support.microsoft.com/help/5005568
https://support.microsoft.com/help/5005568
FixedWindows 10 Version 1909 for 32-bit Systemsmsrc_csaf
10.0.18363.1801:Security Update:https://support.microsoft.com/help/5005566
https://support.microsoft.com/help/5005566
FixedWindows 10 Version 1909 for ARM64-based Systemsmsrc_csaf
10.0.18363.1801:Security Update:https://support.microsoft.com/help/5005566
https://support.microsoft.com/help/5005566
FixedWindows 10 Version 1909 for x64-based Systemsmsrc_csaf
10.0.18363.1801:Security Update:https://support.microsoft.com/help/5005566
https://support.microsoft.com/help/5005566
FixedWindows 10 Version 2004 for 32-bit Systemsmsrc_csaf
10.0.19041.1237:Security Update:https://support.microsoft.com/help/5005565
https://support.microsoft.com/help/5005565
FixedWindows 10 Version 2004 for ARM64-based Systemsmsrc_csaf
10.0.19041.1237:Security Update:https://support.microsoft.com/help/5005565
https://support.microsoft.com/help/5005565
FixedWindows 10 Version 2004 for x64-based Systemsmsrc_csaf
10.0.19041.1237:Security Update:https://support.microsoft.com/help/5005565
https://support.microsoft.com/help/5005565
FixedWindows 10 Version 20H2 for 32-bit Systemsmsrc_csaf
10.0.19042.1237:Security Update:https://support.microsoft.com/help/5005565
https://support.microsoft.com/help/5005565
FixedWindows 10 Version 20H2 for ARM64-based Systemsmsrc_csaf
10.0.19042.1237:Security Update:https://support.microsoft.com/help/5005565
https://support.microsoft.com/help/5005565
FixedWindows 10 Version 21H1 for 32-bit Systemsmsrc_csaf
10.0.19043.1237:Security Update:https://support.microsoft.com/help/5005565
https://support.microsoft.com/help/5005565
FixedWindows 10 Version 21H1 for ARM64-based Systemsmsrc_csaf
10.0.19043.1237:Security Update:https://support.microsoft.com/help/5005565
https://support.microsoft.com/help/5005565
FixedWindows 10 Version 21H1 for x64-based Systemsmsrc_csaf
10.0.19043.1237:Security Update:https://support.microsoft.com/help/5005565
https://support.microsoft.com/help/5005565
FixedWindows 10 for 32-bit Systemsmsrc_csaf
10.0.10240.19060:Security Update:https://support.microsoft.com/help/5005569
https://support.microsoft.com/help/5005569
FixedWindows 10 for x64-based Systemsmsrc_csaf
10.0.10240.19060:Security Update:https://support.microsoft.com/help/5005569
https://support.microsoft.com/help/5005569
FixedWindows 7 for 32-bit Systems Service Pack 1msrc_csaf
6.1.7601.25712:Security Only:https://support.microsoft.com/help/5005615
https://support.microsoft.com/help/5005615
FixedWindows 7 for x64-based Systems Service Pack 1msrc_csaf
6.1.7601.25712:Security Only:https://support.microsoft.com/help/5005615
https://support.microsoft.com/help/5005615
FixedWindows 8.1 for 32-bit systemsmsrc_csaf
6.3.9600.20120:Monthly Rollup:https://support.microsoft.com/help/5005613
https://support.microsoft.com/help/5005613
FixedWindows 8.1 for x64-based systemsmsrc_csaf
6.3.9600.20120:Monthly Rollup:https://support.microsoft.com/help/5005613
https://support.microsoft.com/help/5005613
FixedWindows RT 8.1msrc_csaf
6.3.9600.20120:Monthly Rollup:https://support.microsoft.com/help/5005613
https://support.microsoft.com/help/5005613
FixedWindows Server 2008 R2 for x64-based Systems Service Pack 1msrc_csaf
6.1.7601.25712:Security Only:https://support.microsoft.com/help/5005615
https://support.microsoft.com/help/5005615
FixedWindows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)msrc_csaf
6.1.7601.25712:Security Only:https://support.microsoft.com/help/5005615
https://support.microsoft.com/help/5005615
FixedWindows Server 2008 for 32-bit Systems Service Pack 2msrc_csaf
6.0.6003.21218:Monthly Rollup:https://support.microsoft.com/help/5005606
https://support.microsoft.com/help/5005606
FixedWindows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)msrc_csaf
6.0.6003.21218:Monthly Rollup:https://support.microsoft.com/help/5005606
https://support.microsoft.com/help/5005606
FixedWindows Server 2008 for x64-based Systems Service Pack 2msrc_csaf
6.0.6003.21218:Monthly Rollup:https://support.microsoft.com/help/5005606
https://support.microsoft.com/help/5005606
FixedWindows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)msrc_csaf
6.0.6003.21218:Monthly Rollup:https://support.microsoft.com/help/5005606
https://support.microsoft.com/help/5005606
FixedWindows Server 2012msrc_csaf
6.2.9200.23462:Security Only:https://support.microsoft.com/help/5005607
https://support.microsoft.com/help/5005607
FixedWindows Server 2012 (Server Core installation)msrc_csaf
6.2.9200.23462:Security Only:https://support.microsoft.com/help/5005607
https://support.microsoft.com/help/5005607
FixedWindows Server 2012 R2msrc_csaf
6.3.9600.20120:Monthly Rollup:https://support.microsoft.com/help/5005613
https://support.microsoft.com/help/5005613
FixedWindows Server 2012 R2 (Server Core installation)msrc_csaf
6.3.9600.20120:Monthly Rollup:https://support.microsoft.com/help/5005613
https://support.microsoft.com/help/5005613
FixedWindows Server 2016msrc_csaf
10.0.14393.4651:Security Update:https://support.microsoft.com/help/5005573
https://support.microsoft.com/help/5005573
FixedWindows Server 2016 (Server Core installation)msrc_csaf
10.0.14393.4651:Security Update:https://support.microsoft.com/help/5005573
https://support.microsoft.com/help/5005573
FixedWindows Server 2019msrc_csaf
10.0.17763.2183:Security Update:https://support.microsoft.com/help/5005568
https://support.microsoft.com/help/5005568
FixedWindows Server 2019 (Server Core installation)msrc_csaf
10.0.17763.2183:Security Update:https://support.microsoft.com/help/5005568
https://support.microsoft.com/help/5005568
FixedWindows Server, version 2004 (Server Core installation)msrc_csaf
10.0.19041.1237:Security Update:https://support.microsoft.com/help/5005565
https://support.microsoft.com/help/5005565
FixedWindows Server, version 20H2 (Server Core Installation)msrc_csaf
10.0.19042.1237:Security Update:https://support.microsoft.com/help/5005565
https://support.microsoft.com/help/5005565

cvss

Technical severity, 0–10. One row per scoring source.

9.3

010

base score 0–10 · higher = more severe · hover a vector to decode

v2.09.3highAV:N/AC:M/Au:N/C:C/I:C/A:Cprimary · NVD / NIST USexploitability 8.6 · impact 10

v2.07.9highAV:N/AC:M/Au:N/C:C/I:C/A:C/E:Usecondary · CVSS-BT (t0sche)

v3.17.3highAV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hsecondary · secure@microsoft.com USexploitability 1.8 · impact 5.9

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:Csecondary · Microsoft Security Response Center US

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:Csecondary · ENISA EU

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Hsecondary · NVD / NIST USexploitability 1.8 · impact 5.9

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-732US

affected products (128)

Products and version ranges known to be affected.

Microsoft Windows 10 Version 150710.0.10240.0 → 10.0.10240.19060enisa_euvdEU
Microsoft Windows 10 Version 160710.0.14393.0 → 10.0.14393.4651enisa_euvdEU
Microsoft Windows 10 Version 180910.0.0 → 10.0.17763.2183enisa_euvdEU
Microsoft Windows 10 Version 180910.0.17763.0 → 10.0.17763.2183enisa_euvdEU
Microsoft Windows 10 Version 190910.0.0 → 10.0.18363.1801enisa_euvdEU
Microsoft Windows 10 Version 200410.0.0 → 10.0.19041.1237enisa_euvdEU
Microsoft Windows 10 Version 20H210.0.0 → 10.0.19042.1237enisa_euvdEU
Microsoft Windows 10 Version 21H110.0.0 → 10.0.19043.1237enisa_euvdEU
Microsoft Windows 76.1.0 → 6.1.7601.25712enisa_euvdEU
Microsoft Windows 7 Service Pack 16.1.0 → 6.1.7601.25712enisa_euvdEU
Microsoft Windows 8.16.3.0 → 6.3.9600.20120enisa_euvdEU
Microsoft Windows Server 2008 R2 Service Pack 16.1.7601.0 → 6.1.7601.25712enisa_euvdEU
Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)6.1.7601.0 → 6.1.7601.25712enisa_euvdEU
Microsoft Windows Server 2008 Service Pack 26.0.6003.0 → 6.0.6003.21218enisa_euvdEU
Microsoft Windows Server 2008 Service Pack 2 (Server Core installation)6.0.6003.0 → 6.0.6003.21218enisa_euvdEU
Microsoft Windows Server 20126.2.9200.0 → 6.2.9200.23462enisa_euvdEU
Microsoft Windows Server 2012 (Server Core installation)6.2.9200.0 → 6.2.9200.23462enisa_euvdEU
Microsoft Windows Server 2012 R26.3.9600.0 → 6.3.9600.20120enisa_euvdEU
Microsoft Windows Server 2012 R2 (Server Core installation)6.3.9600.0 → 6.3.9600.20120enisa_euvdEU
Microsoft Windows Server 201610.0.14393.0 → 10.0.14393.4651enisa_euvdEU

showing 20 of 128

advisories (1)

Vendor and ecosystem advisories describing this.

msrc_CVE-2021-36958Windows Print Spooler Remote Code Execution Vulnerability2021-08-11csaf · msrc_csafUS
To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu msrc_csaf NVD CVE.org MITRE

published 2021-08-12modified 2026-08-10

references (8)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan