CVE Catalog
Actively exploited in the wild
Microsoft Windows Print Spooler Remote Code Execution Vulnerability
Microsoft - Windows · Listed in the CISA KEV since 2021-11-03. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions.
CVE-2021-1675
HighCVSS 7.8KEVExploitation Probability (EPSS)
Very high risk84.81%
100th percentile - higher than 100% of all known CVEs
Summary
A remote code execution vulnerability in Windows Print Spooler allows an attacker to execute arbitrary code with system privileges.
Risk Assessment
An attacker could take control of the system, leading to malware installation, data theft, and full system compromise.
Recommendation
Apply Microsoft's security updates for Windows Print Spooler immediately and disable the service if not needed.
Original NVD description (English source)
Windows Print Spooler Remote Code Execution Vulnerability