CVE-2021-34527

CVE-2021-34527, known as "PrintNightmare," is a critical remote code execution vulnerability affecting the Windows Print Spooler service across various Microsoft Windows versions. An attacker can exploit this flaw to run arbitrary code with SYSTEM privileges, enabling them to install programs, manipulate data, or create new accounts. With a CVSS score of 8.8 (High) and an EPSS score indicating high exploitability, this vulnerability is easily exploited over the network with low complexity and no user interaction, leading to complete compromise of confidentiality, integrity, and availability. It is actively exploited in the wild, including in known ransomware campaigns, with public exploit modules available, and has garnered significant community and media attention.