PT-2021-3528 · Microsoft · Windows Print Spooler+1

Edwardzpeng + 4 · CVE-2021-34527 · Published 2021-06-28 · Updated 2026-07-08

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows Print Spooler (affected versions not specified)

Description A remote code execution flaw exists in the Windows Print Spooler service due to improper privileged file operations and access control deficiencies. An attacker with low privileges can execute arbitrary code with SYSTEM privileges by spoofing print jobs or loading a malicious DLL library. Successful exploitation allows the attacker to install programs, view, modify, or delete data, and create new accounts with full user rights. This issue has been utilized in ransomware attacks.

Recommendations Disable the Print Spooler service on non-print servers. Enforce the use of signed drivers. Monitor Active Directory for suspicious activity.

Exploit

Fix

RCE

Improper Privilege Management

Weakness Enumeration

CWE-264

CWE-269

Related Identifiers

BDU:2021-03578

CVE-2021-34527

MICROSOFTWINDOWSCVE2021_34527

Affected Products

Windows

Windows Print Spooler

References · 144

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/dcerpc/cve_2021_1675_printnightmare.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/dcerpc/cve_2021_1675_printnightmare.rb · Exploit
• 🔥 https://github.com/byt3bl33d3r/ItWasAllADream · Exploit
• 🔥 https://github.com/JohnHammond/CVE-2021-34527 · Exploit
• 🔥 https://github.com/nemo-wq/PrintNightmare-CVE-2021-34527 · Exploit
• 🔥 https://github.com/m8sec/CVE-2021-34527 · Exploit
• 🔥 https://github.com/hackerhouse-opensource/cve-2021-34527 · Exploit
• 🔥 https://github.com/thomas-lauer/PrintNightmare · Exploit
• 🔥 https://github.com/glshnu/PrintNightmare · Exploit
• 🔥 https://github.com/CnOxx1/CVE-2021-34527-1675 · Exploit
• 🔥 https://github.com/dywhoami/CVE-2021-34527-Scanner-Based-On-cube0x0-POC · Exploit
• 🔥 https://github.com/Tomparte/PrintNightmare · Exploit
• 🔥 https://github.com/0xirison/PrintNightmare-Patcher · Exploit
• 🔥 https://vicarius.io/vsociety/posts/cve-2021-34527-printnightmare-mitigation-script · Exploit
• 🔥 http://packetstormsecurity.com/files/167261/Print-Spooler-Remote-DLL-Injection.html · Exploit