Vulnerabilities > CVE-2021-34527 - Improper Privilege Management vulnerability in Microsoft products

CVSS 8.8 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

microsoft

CWE-269

NVD

Published: 2021-07-02

Updated: 2024-02-02

Summary

A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. UPDATE July 7, 2021: The security update for Windows Server 2012, Windows Server 2016 and Windows 10, Version 1607 have been released. Please see the Security Updates table for the applicable update for your system. We recommend that you install these updates immediately. If you are unable to install these updates, see the FAQ and Workaround sections in this CVE for information on how to help protect your system from this vulnerability. In addition to installing the updates, in order to secure your system, you must confirm that the following registry settings are set to 0 (zero) or are not defined (Note: These registry keys do not exist by default, and therefore are already at the secure setting.), also that your Group Policy setting are correct (see FAQ): <ul> <li>HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\PointAndPrint</li> <li>NoWarningNoElevationOnInstall = 0 (DWORD) or not defined (default setting)</li> <li>UpdatePromptSettings = 0 (DWORD) or not defined (default setting)</li> </ul> Having NoWarningNoElevationOnInstall set to 1 makes your system vulnerable by design. UPDATE July 6, 2021: Microsoft has completed the investigation and has released security updates to address this vulnerability. Please see the Security Updates table for the applicable update for your system. We recommend that you install these updates immediately. If you are unable to install these updates, see the FAQ and Workaround sections in this CVE for information on how to help protect your system from this vulnerability. See also <a href="https://support.microsoft.com/topic/31b91c02-05bc-4ada-a7ea-183b129578a7">KB5005010: Restricting installation of new printer drivers after applying the July 6, 2021 updates</a>. Note that the security updates released on and after July 6, 2021 contain protections for CVE-2021-1675 and the additional remote code execution exploit in the Windows Print Spooler service known as “PrintNightmare”, documented in CVE-2021-34527.

Vulnerable Configurations

Part	Description	Count
OS	Microsoft Microsoft Windows Server 2008 R2 Microsoft Windows Server 2008 - Microsoft Windows Server 2012 R2 Microsoft Windows Server 2012 - Microsoft Windows 8.1 - Microsoft Windows 7 - Microsoft Windows RT 8.1 - Microsoft Windows Server 2019 - Microsoft Windows Server 20H2 - Microsoft Windows 10 1809 - Microsoft Windows 10 1809 10.0.17763.1 Microsoft Windows 10 1809 10.0.17763.55 Microsoft Windows 10 1809 10.0.17763.107 Microsoft Windows 10 1809 10.0.17763.134 Microsoft Windows 10 1809 10.0.17763.168 Microsoft Windows 10 1809 10.0.17763.194 Microsoft Windows 10 1809 10.0.17763.195 Microsoft Windows 10 1809 10.0.17763.253 Microsoft Windows 10 1809 10.0.17763.292 Microsoft Windows 10 1809 10.0.17763.316 Microsoft Windows 10 1809 10.0.17763.348 Microsoft Windows 10 1809 10.0.17763.379 Microsoft Windows 10 1809 10.0.17763.404 Microsoft Windows 10 1809 10.0.17763.437 Microsoft Windows 10 1809 10.0.17763.439 Microsoft Windows 10 1809 10.0.17763.475 Microsoft Windows 10 1809 10.0.17763.503 Microsoft Windows 10 1809 10.0.17763.504 Microsoft Windows 10 1809 10.0.17763.529 Microsoft Windows 10 1809 10.0.17763.557 Microsoft Windows 10 1809 10.0.17763.592 Microsoft Windows 10 1809 10.0.17763.593 Microsoft Windows 10 1809 10.0.17763.615 Microsoft Windows 10 1809 10.0.17763.652 Microsoft Windows 10 1809 10.0.17763.678 Microsoft Windows 10 1809 10.0.17763.720 Microsoft Windows 10 1809 10.0.17763.737 Microsoft Windows 10 1809 10.0.17763.740 Microsoft Windows 10 1809 10.0.17763.774 Microsoft Windows 10 1809 10.0.17763.775 Microsoft Windows 10 1809 10.0.17763.805 Microsoft Windows 10 1809 10.0.17763.832 Microsoft Windows 10 1809 10.0.17763.864 Microsoft Windows 10 1809 10.0.17763.914 Microsoft Windows 10 1809 10.0.17763.973 Microsoft Windows 10 1809 10.0.17763.1012 Microsoft Windows 10 1809 10.0.17763.1039 Microsoft Windows 10 1809 10.0.17763.1075 Microsoft Windows 10 1809 10.0.17763.1098 Microsoft Windows 10 1809 10.0.17763.1131 Microsoft Windows 10 1809 10.0.17763.1132 Microsoft Windows 10 1809 10.0.17763.1158 Microsoft Windows 10 1809 10.0.17763.1192 Microsoft Windows 10 1809 10.0.17763.1217 Microsoft Windows 10 1809 10.0.17763.1282 Microsoft Windows 10 1809 10.0.17763.1294 Microsoft Windows 10 1809 10.0.17763.1339 Microsoft Windows 10 1809 10.0.17763.1369 Microsoft Windows 10 1809 10.0.17763.1397 Microsoft Windows 10 1809 10.0.17763.1432 Microsoft Windows 10 1809 10.0.17763.1457 Microsoft Windows 10 1809 10.0.17763.1490 Microsoft Windows 10 1809 10.0.17763.1518 Microsoft Windows 10 1809 10.0.17763.1554 Microsoft Windows 10 1809 10.0.17763.1577 Microsoft Windows 10 1809 10.0.17763.1579 Microsoft Windows 10 1809 10.0.17763.1613 Microsoft Windows 10 1809 10.0.17763.1637 Microsoft Windows 10 1809 10.0.17763.1697 Microsoft Windows 10 1809 10.0.17763.1728 Microsoft Windows 10 1809 10.0.17763.1757 Microsoft Windows 10 1809 10.0.17763.1790 Microsoft Windows 10 1809 10.0.17763.1817 Microsoft Windows 10 1809 10.0.17763.1821 Microsoft Windows 10 1809 10.0.17763.1823 Microsoft Windows 10 1809 10.0.17763.1852 Microsoft Windows 10 1809 10.0.17763.1879 Microsoft Windows 10 1809 10.0.17763.1911 Microsoft Windows 10 1809 10.0.17763.1935 Microsoft Windows 10 1809 10.0.17763.1971 Microsoft Windows 10 1809 10.0.17763.1999 Microsoft Windows 10 1809 10.0.17763.2028 Microsoft Windows 10 20H2 - Microsoft Windows 10 20H2 10.0.19042.572 Microsoft Windows 10 20H2 10.0.19042.610 Microsoft Windows 10 20H2 10.0.19042.630 Microsoft Windows 10 20H2 10.0.19042.631 Microsoft Windows 10 20H2 10.0.19042.662 Microsoft Windows 10 20H2 10.0.19042.685 Microsoft Windows 10 20H2 10.0.19042.746 Microsoft Windows 10 20H2 10.0.19042.789 Microsoft Windows 10 20H2 10.0.19042.804 Microsoft Windows 10 20H2 10.0.19042.844 Microsoft Windows 10 20H2 10.0.19042.867 Microsoft Windows 10 20H2 10.0.19042.868 Microsoft Windows 10 20H2 10.0.19042.870 Microsoft Windows 10 20H2 10.0.19042.906 Microsoft Windows 10 20H2 10.0.19042.928 Microsoft Windows 10 20H2 10.0.19042.964 Microsoft Windows 10 20H2 10.0.19042.985 Microsoft Windows 10 20H2 10.0.19042.1023 Microsoft Windows 10 20H2 10.0.19042.1052 Microsoft Windows 10 20H2 10.0.19042.1055 Microsoft Windows 10 20H2 10.0.19042.1081 Microsoft Windows 10 20H2 10.0.19042.1082 Microsoft Windows 10 1507 - Microsoft Windows 10 1507 10.0.10240.16405 Microsoft Windows 10 1507 10.0.10240.16413 Microsoft Windows 10 1507 10.0.10240.16430 Microsoft Windows 10 1507 10.0.10240.16433 Microsoft Windows 10 1507 10.0.10240.16445 Microsoft Windows 10 1507 10.0.10240.16463 Microsoft Windows 10 1507 10.0.10240.16487 Microsoft Windows 10 1507 10.0.10240.16520 Microsoft Windows 10 1507 10.0.10240.16549 Microsoft Windows 10 1507 10.0.10240.16566 Microsoft Windows 10 1507 10.0.10240.16590 Microsoft Windows 10 1507 10.0.10240.16601 Microsoft Windows 10 1507 10.0.10240.16644 Microsoft Windows 10 1507 10.0.10240.16683 Microsoft Windows 10 1507 10.0.10240.16725 Microsoft Windows 10 1507 10.0.10240.16771 Microsoft Windows 10 1507 10.0.10240.16854 Microsoft Windows 10 1507 10.0.10240.16942 Microsoft Windows 10 1507 10.0.10240.17024 Microsoft Windows 10 1507 10.0.10240.17071 Microsoft Windows 10 1507 10.0.10240.17113 Microsoft Windows 10 1507 10.0.10240.17146 Microsoft Windows 10 1507 10.0.10240.17190 Microsoft Windows 10 1507 10.0.10240.17202 Microsoft Windows 10 1507 10.0.10240.17236 Microsoft Windows 10 1507 10.0.10240.17319 Microsoft Windows 10 1507 10.0.10240.17354 Microsoft Windows 10 1507 10.0.10240.17394 Microsoft Windows 10 1507 10.0.10240.17443 Microsoft Windows 10 1507 10.0.10240.17446 Microsoft Windows 10 1507 10.0.10240.17488 Microsoft Windows 10 1507 10.0.10240.17533 Microsoft Windows 10 1507 10.0.10240.17609 Microsoft Windows 10 1507 10.0.10240.17643 Microsoft Windows 10 1507 10.0.10240.17673 Microsoft Windows 10 1507 10.0.10240.17709 Microsoft Windows 10 1507 10.0.10240.17738 Microsoft Windows 10 1507 10.0.10240.17741 Microsoft Windows 10 1507 10.0.10240.17770 Microsoft Windows 10 1507 10.0.10240.17797 Microsoft Windows 10 1507 10.0.10240.17831 Microsoft Windows 10 1507 10.0.10240.17861 Microsoft Windows 10 1507 10.0.10240.17889 Microsoft Windows 10 1507 10.0.10240.17914 Microsoft Windows 10 1507 10.0.10240.17918 Microsoft Windows 10 1507 10.0.10240.17946 Microsoft Windows 10 1507 10.0.10240.17976 Microsoft Windows 10 1507 10.0.10240.18005 Microsoft Windows 10 1507 10.0.10240.18036 Microsoft Windows 10 1507 10.0.10240.18063 Microsoft Windows 10 1507 10.0.10240.18064 Microsoft Windows 10 1507 10.0.10240.18094 Microsoft Windows 10 1507 10.0.10240.18132 Microsoft Windows 10 1507 10.0.10240.18135 Microsoft Windows 10 1507 10.0.10240.18158 Microsoft Windows 10 1507 10.0.10240.18186 Microsoft Windows 10 1507 10.0.10240.18187 Microsoft Windows 10 1507 10.0.10240.18215 Microsoft Windows 10 1507 10.0.10240.18218 Microsoft Windows 10 1507 10.0.10240.18244 Microsoft Windows 10 1507 10.0.10240.18275 Microsoft Windows 10 1507 10.0.10240.18305 Microsoft Windows 10 1507 10.0.10240.18308 Microsoft Windows 10 1507 10.0.10240.18333 Microsoft Windows 10 1507 10.0.10240.18334 Microsoft Windows 10 1507 10.0.10240.18335 Microsoft Windows 10 1507 10.0.10240.18368 Microsoft Windows 10 1507 10.0.10240.18395 Microsoft Windows 10 1507 10.0.10240.18427 Microsoft Windows 10 1507 10.0.10240.18453 Microsoft Windows 10 1507 10.0.10240.18486 Microsoft Windows 10 1507 10.0.10240.18519 Microsoft Windows 10 1507 10.0.10240.18545 Microsoft Windows 10 1507 10.0.10240.18575 Microsoft Windows 10 1507 10.0.10240.18608 Microsoft Windows 10 1507 10.0.10240.18609 Microsoft Windows 10 1507 10.0.10240.18638 Microsoft Windows 10 1507 10.0.10240.18666 Microsoft Windows 10 1507 10.0.10240.18696 Microsoft Windows 10 1507 10.0.10240.18725 Microsoft Windows 10 1507 10.0.10240.18756 Microsoft Windows 10 1507 10.0.10240.18782 Microsoft Windows 10 1507 10.0.10240.18818 Microsoft Windows 10 1507 10.0.10240.18841 Microsoft Windows 10 1507 10.0.10240.18874 Microsoft Windows 10 1507 10.0.10240.18875 Microsoft Windows 10 1507 10.0.10240.18906 Microsoft Windows 10 1507 10.0.10240.18932 Microsoft Windows 10 1507 10.0.10240.18967 Microsoft Windows 10 1607 - Microsoft Windows 10 1607 10.0.14393.10 Microsoft Windows 10 1607 10.0.14393.51 Microsoft Windows 10 1607 10.0.14393.82 Microsoft Windows 10 1607 10.0.14393.105 Microsoft Windows 10 1607 10.0.14393.187 Microsoft Windows 10 1607 10.0.14393.222 Microsoft Windows 10 1607 10.0.14393.321 Microsoft Windows 10 1607 10.0.14393.351 Microsoft Windows 10 1607 10.0.14393.447 Microsoft Windows 10 1607 10.0.14393.479 Microsoft Windows 10 1607 10.0.14393.576 Microsoft Windows 10 1607 10.0.14393.693 Microsoft Windows 10 1607 10.0.14393.953 Microsoft Windows 10 1607 10.0.14393.969 Microsoft Windows 10 1607 10.0.14393.1066 Microsoft Windows 10 1607 10.0.14393.1198 Microsoft Windows 10 1607 10.0.14393.1358 Microsoft Windows 10 1607 10.0.14393.1378 Microsoft Windows 10 1607 10.0.14393.1480 Microsoft Windows 10 1607 10.0.14393.1532 Microsoft Windows 10 1607 10.0.14393.1537 Microsoft Windows 10 1607 10.0.14393.1593 Microsoft Windows 10 1607 10.0.14393.1613 Microsoft Windows 10 1607 10.0.14393.1670 Microsoft Windows 10 1607 10.0.14393.1715 Microsoft Windows 10 1607 10.0.14393.1737 Microsoft Windows 10 1607 10.0.14393.1770 Microsoft Windows 10 1607 10.0.14393.1794 Microsoft Windows 10 1607 10.0.14393.1797 Microsoft Windows 10 1607 10.0.14393.1884 Microsoft Windows 10 1607 10.0.14393.1914 Microsoft Windows 10 1607 10.0.14393.1944 Microsoft Windows 10 1607 10.0.14393.2007 Microsoft Windows 10 1607 10.0.14393.2035 Microsoft Windows 10 1607 10.0.14393.2068 Microsoft Windows 10 1607 10.0.14393.2097 Microsoft Windows 10 1607 10.0.14393.2125 Microsoft Windows 10 1607 10.0.14393.2155 Microsoft Windows 10 1607 10.0.14393.2156 Microsoft Windows 10 1607 10.0.14393.2189 Microsoft Windows 10 1607 10.0.14393.2214 Microsoft Windows 10 1607 10.0.14393.2248 Microsoft Windows 10 1607 10.0.14393.2273 Microsoft Windows 10 1607 10.0.14393.2312 Microsoft Windows 10 1607 10.0.14393.2339 Microsoft Windows 10 1607 10.0.14393.2363 Microsoft Windows 10 1607 10.0.14393.2368 Microsoft Windows 10 1607 10.0.14393.2395 Microsoft Windows 10 1607 10.0.14393.2396 Microsoft Windows 10 1607 10.0.14393.2430 Microsoft Windows 10 1607 10.0.14393.2457 Microsoft Windows 10 1607 10.0.14393.2485 Microsoft Windows 10 1607 10.0.14393.2515 Microsoft Windows 10 1607 10.0.14393.2551 Microsoft Windows 10 1607 10.0.14393.2580 Microsoft Windows 10 1607 10.0.14393.2608 Microsoft Windows 10 1607 10.0.14393.2639 Microsoft Windows 10 1607 10.0.14393.2641 Microsoft Windows 10 1607 10.0.14393.2665 Microsoft Windows 10 1607 10.0.14393.2670 Microsoft Windows 10 1607 10.0.14393.2724 Microsoft Windows 10 1607 10.0.14393.2759 Microsoft Windows 10 1607 10.0.14393.2791 Microsoft Windows 10 1607 10.0.14393.2828 Microsoft Windows 10 1607 10.0.14393.2848 Microsoft Windows 10 1607 10.0.14393.2879 Microsoft Windows 10 1607 10.0.14393.2906 Microsoft Windows 10 1607 10.0.14393.2908 Microsoft Windows 10 1607 10.0.14393.2941 Microsoft Windows 10 1607 10.0.14393.2969 Microsoft Windows 10 1607 10.0.14393.2972 Microsoft Windows 10 1607 10.0.14393.2999 Microsoft Windows 10 1607 10.0.14393.3025 Microsoft Windows 10 1607 10.0.14393.3053 Microsoft Windows 10 1607 10.0.14393.3056 Microsoft Windows 10 1607 10.0.14393.3085 Microsoft Windows 10 1607 10.0.14393.3115 Microsoft Windows 10 1607 10.0.14393.3144 Microsoft Windows 10 1607 10.0.14393.3181 Microsoft Windows 10 1607 10.0.14393.3204 Microsoft Windows 10 1607 10.0.14393.3206 Microsoft Windows 10 1607 10.0.14393.3242 Microsoft Windows 10 1607 10.0.14393.3243 Microsoft Windows 10 1607 10.0.14393.3274 Microsoft Windows 10 1607 10.0.14393.3300 Microsoft Windows 10 1607 10.0.14393.3326 Microsoft Windows 10 1607 10.0.14393.3384 Microsoft Windows 10 1607 10.0.14393.3443 Microsoft Windows 10 1607 10.0.14393.3474 Microsoft Windows 10 1607 10.0.14393.3504 Microsoft Windows 10 1607 10.0.14393.3542 Microsoft Windows 10 1607 10.0.14393.3564 Microsoft Windows 10 1607 10.0.14393.3595 Microsoft Windows 10 1607 10.0.14393.3630 Microsoft Windows 10 1607 10.0.14393.3659 Microsoft Windows 10 1607 10.0.14393.3686 Microsoft Windows 10 1607 10.0.14393.3750 Microsoft Windows 10 1607 10.0.14393.3755 Microsoft Windows 10 1607 10.0.14393.3808 Microsoft Windows 10 1607 10.0.14393.3866 Microsoft Windows 10 1607 10.0.14393.3930 Microsoft Windows 10 1607 10.0.14393.3986 Microsoft Windows 10 1607 10.0.14393.4046 Microsoft Windows 10 1607 10.0.14393.4048 Microsoft Windows 10 1607 10.0.14393.4104 Microsoft Windows 10 1607 10.0.14393.4169 Microsoft Windows 10 1607 10.0.14393.4225 Microsoft Windows 10 1607 10.0.14393.4283 Microsoft Windows 10 1607 10.0.14393.4288 Microsoft Windows 10 1607 10.0.14393.4350 Microsoft Windows 10 1607 10.0.14393.4402 Microsoft Windows 10 1607 10.0.14393.4467 Microsoft Windows Server 2016 - Microsoft Windows Server 2022 - Microsoft Windows 11 21H2 - Microsoft Windows 11 21H2 10.0.19044.2965 Microsoft Windows 11 21H2 10.0.22000.194 Microsoft Windows 11 21H2 10.0.22000.258 Microsoft Windows 11 21H2 10.0.22000.282 Microsoft Windows 10 21H2 - Microsoft Windows 10 21H2 10.0.19041.3208 Microsoft Windows 10 21H2 10.0.19041.3570 Microsoft Windows 10 21H2 10.0.19041.3693 Microsoft Windows 10 21H2 10.0.19041.3803 Microsoft Windows 10 21H2 10.0.19042.1889 Microsoft Windows 10 21H2 10.0.19042.2486 Microsoft Windows 10 21H2 10.0.19043.1889 Microsoft Windows 10 21H2 10.0.19044.1288 Microsoft Windows 10 21H2 10.0.19044.1387 Microsoft Windows 11 22H2 - Microsoft Windows 11 22H2 10.0.22000.1413 Microsoft Windows 11 22H2 10.0.22000.1702 Microsoft Windows 11 22H2 10.0.22621.521 Microsoft Windows 11 22H2 10.0.22621.525 Microsoft Windows 11 22H2 10.0.22621.608 Microsoft Windows 10 22H2 - Microsoft Windows 10 22H2 10.0.19041.3570 Microsoft Windows 10 22H2 10.0.19042.2486 Microsoft Windows 10 22H2 10.0.19044.2486 Microsoft Windows 10 22H2 10.0.19045.2130	999

Common Weakness Enumeration (CWE)

CWE-269 - Improper Privilege Management

Common Attack Pattern Enumeration and Classification (CAPEC)

Restful Privilege Elevation
Rest uses standard HTTP (Get, Put, Delete) style permissions methods, but these are not necessarily correlated generally with back end programs. Strict interpretation of HTTP get methods means that these HTTP Get services should not be used to delete information on the server, but there is no access control mechanism to back up this logic. This means that unless the services are properly ACL'd and the application's service implementation are following these guidelines then an HTTP request can easily execute a delete or update on the server side. The attacker identifies a HTTP Get URL such as http://victimsite/updateOrder, which calls out to a program to update orders on a database or other resource. The URL is not idempotent so the request can be submitted multiple times by the attacker, additionally, the attacker may be able to exploit the URL published as a Get method that actually performs updates (instead of merely retrieving data). This may result in malicious or inadvertent altering of data on the server.

Vulnerabilities > CVE-2021-34527 - Improper Privilege Management vulnerability in Microsoft products

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

Common Attack Pattern Enumeration and Classification (CAPEC)

Related news

References