Skip to main content
← All vulnerabilities
CVE-2021-1678

Windows Print Spooler Spoofing Vulnerability

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 10.0.19041.1237, 10.0.17763.2183, 10.0.18363.1801, 10.0.10240.19060, 10.0.14393.4651, and 4 more
1 proof of concept on GitHub

Summary

Windows Print Spooler Spoofing Vulnerability

Timeline

  1. CVE published
  2. Record last updated
  3. EPSS reached 10%

    FIRST estimates at least a 10% chance of exploitation in the next 30 days

Affected versions

  • Microsoft Windows 10 Version 20H2

    From 10.0.0 · fixed in 10.0.19041.1237

  • Microsoft Windows Server version 20H2

    From 10.0.0 · fixed in 10.0.19041.1237

  • Microsoft Windows 10 Version 1803

    From 10.0.0

  • Microsoft Windows 10 Version 1809

    From 10.0.0 · fixed in 10.0.17763.2183

  • Microsoft Windows Server 2019

    From 10.0.0 · fixed in 10.0.17763.2183

  • Microsoft Windows Server 2019 (Server Core installation)

    From 10.0.0 · fixed in 10.0.17763.2183

  • Microsoft Windows 10 Version 1909

    From 10.0.0 · fixed in 10.0.18363.1801

  • Microsoft Windows Server, version 1909 (Server Core installation)

    From 10.0.0

  • Microsoft Windows 10 Version 2004

    From 10.0.0 · fixed in 10.0.19041.1237

  • Microsoft Windows Server version 2004

    From 10.0.0 · fixed in 10.0.19041.1237

  • Microsoft Windows 10 Version 1507

    From 10.0.0 · fixed in 10.0.10240.19060

  • Microsoft Windows 10 Version 1607

    From 10.0.0 · fixed in 10.0.14393.4651

  • Microsoft Windows Server 2016

    From 10.0.0 · fixed in 10.0.14393.4651

  • Microsoft Windows Server 2016 (Server Core installation)

    From 10.0.0 · fixed in 10.0.14393.4651

  • Microsoft Windows 7

    From 6.1.0 · fixed in 6.1.7601.25712

  • Microsoft Windows 7 Service Pack 1

    From 6.1.0 · fixed in 6.1.7601.25712

  • Microsoft Windows 8.1

    From 6.3.0 · fixed in 6.3.9600.20120

  • Microsoft Windows Server 2008 Service Pack 2

    From 6.0.0 · fixed in 6.0.6003.21218

  • Microsoft Windows Server 2008 Service Pack 2 (Server Core installation)

    From 6.0.0 · fixed in 6.0.6003.21218

  • Microsoft Windows Server 2008 Service Pack 2

    From 6.0.0 · fixed in 6.0.6003.21218

  • Microsoft Windows Server 2008 R2 Service Pack 1

    From 6.1.0 · fixed in 6.1.7601.25712

  • Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)

    From 6.0.0 · fixed in 6.1.7601.25712

  • Microsoft Windows Server 2012

    From 6.2.0 · fixed in 6.2.9200.23462

  • Microsoft Windows Server 2012 (Server Core installation)

    From 6.2.0 · fixed in 6.2.9200.23462

  • Microsoft Windows Server 2012 R2

    From 6.3.0 · fixed in 6.3.9600.20120

  • Microsoft Windows Server 2012 R2 (Server Core installation)

    From 6.3.0 · fixed in 6.3.9600.20120

References 2

msrc.microsoft.com

GitHub · alvaciroliveira/RpcAuthnLevelPrivacyEnabled