CVE WatchAug 10, 2026

CVE-2021-36958

A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attac

CVSS

7.8

High

EPSS

30.8%

p98

KEV

—

Exploit Today

0-100

Published: Aug 12, 2021 · Last modified: Aug 10, 2026

EPSS · 30d

30.6%EPSS · 30 days30.8%

2026-09-232026-10-21

Technical description

A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.

Official references

msrc.microsoft.comhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-36958
portal.msrc.microsoft.comhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36958
www.kb.cert.orghttps://www.kb.cert.org/vuls/id/131152

Related CVEs

No related CVEs by CWE or product.