Windows NTLM
CVE-2021-1678 — Windows Print Spooler Spoofing Vulnerability
Executive Summary
None
Overview
8.8
CVSS HIGH
Important
MS Severity
Not Exploited
MS Exploit Status
Less Likely
MS Exploit Likelihood
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
ATTACK VECTOR
Network
ATTACK COMPLEXITY
Low
PRIVILEGES REQUIRED
None
USER INTERACTION
Required
SCOPE
Unchanged
CONFIDENTIALITY
High
INTEGRITY
High
AVAILABILITY
High
EXPLOIT CODE MATURITY
Proof-of-Concept
REMEDIATION LEVEL
Official Fix
REPORT CONFIDENCE
Confirmed
Temporal Score: 7.9
EPSS Score
0.0938
probability of exploitation in the next 30 days
0.94879 percentile - updated 2026-07-25
View on FIRST.org
Affected Products
26 affected products
| Product | KB Article | Severity | Impact | Restart Required |
|---|---|---|---|---|
| Windows 10 for 32-bit Systems | 5005569 (Security Update) |
Important | Spoofing | Yes |
| Windows 10 for x64-based Systems | 5005569 (Security Update) |
Important | Spoofing | Yes |
| Windows 10 Version 1607 for 32-bit Systems | 5005573 (Security Update) |
Important | Spoofing | Yes |
| Windows 10 Version 1607 for x64-based Systems | 5005573 (Security Update) |
Important | Spoofing | Yes |
| Windows 10 Version 1803 for 32-bit Systems | 4598245 (Security Update) |
Important | Spoofing | Yes |
| Windows 10 Version 1803 for ARM64-based Systems | 4598245 (Security Update) |
Important | Spoofing | Yes |
| Windows 10 Version 1803 for x64-based Systems | 4598245 (Security Update) |
Important | Spoofing | Yes |
| Windows 10 Version 1809 for 32-bit Systems | 5005568 (Security Update) |
Important | Spoofing | Yes |
| Windows 10 Version 1809 for ARM64-based Systems | 5005568 (Security Update) |
Important | Spoofing | Yes |
| Windows 10 Version 1809 for x64-based Systems | 5005568 (Security Update) |
Important | Spoofing | Yes |
| Windows 10 Version 1909 for 32-bit Systems | 5005566 (Security Update) |
Important | Spoofing | Yes |
| Windows 10 Version 1909 for ARM64-based Systems | 5005566 (Security Update) |
Important | Spoofing | Yes |
| Windows 10 Version 1909 for x64-based Systems | 5005566 (Security Update) |
Important | Spoofing | Yes |
| Windows 10 Version 2004 for 32-bit Systems | 5005565 (Security Update) |
Important | Spoofing | Yes |
| Windows 10 Version 2004 for ARM64-based Systems | 5005565 (Security Update) |
Important | Spoofing | Yes |
| Windows 10 Version 2004 for x64-based Systems | 5005565 (Security Update) |
Important | Spoofing | Yes |
| Windows 10 Version 20H2 for 32-bit Systems | 5005565 (Security Update) |
Important | Spoofing | Yes |
| Windows 10 Version 20H2 for ARM64-based Systems | 5005565 (Security Update) |
Important | Spoofing | Yes |
| Windows 10 Version 20H2 for x64-based Systems | 5005565 (Security Update) |
Important | Spoofing | Yes |
| Windows 7 for 32-bit Systems Service Pack 1 5005633 (Monthly Rollup) 5005615 (Security Only) Important Spoofing 5005088 Base: 8.8 Temporal: 7.9 Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 6.1.7601.25712 Yes 5005633 5005615 Windows 7 for x64-based Systems Service Pack 1 5005633 (Monthly Rollup) 5005615 (Security Only) Important Spoofing 5005088 Base: 8.8 Temporal: 7.9 Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 6.1.7601.25712 Yes 5005633 5005615 Windows 8.1 for 32-bit systems 5005613 (Monthly Rollup) 5005627 (Security Only) 5005613 (Monthly Rollup) Important Spoofing 5005076 Base: 8.8 Temporal: 7.9 Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 6.3.9600.20120 Yes 5005613 5005627 5005613 Windows 8.1 for x64-based systems 5005613 (Monthly Rollup) 5005627 (Security Only) 5005613 (Monthly Rollup) Important Spoofing 5005076 Base: 8.8 Temporal: 7.9 Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 6.3.9600.20120 Yes 5005613 5005627 5005613 Windows RT 8.1 5005613 (Monthly Rollup) 5005613 (Monthly Rollup) Important Spoofing 5005076 Base: 8.8 Temporal: 7.9 Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 6.3.9600.20120 Yes 5005613 5005613 Windows Server 2008 for 32-bit Systems Service Pack 2 5005606 (Monthly Rollup) 5005618 (Security Only) Important Spoofing 5005090 Base: 8.8 Temporal: 7.9 Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 6.0.6003.21218 Yes 5005606 5005618 Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) 5005606 (Monthly Rollup) 5005618 (Security Only) Important Spoofing 5005090 Base: 8.8 Temporal: 7.9 Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 6.0.6003.21218 Yes 5005606 5005618 Windows Server 2008 for x64-based Systems Service Pack 2 5005606 (Monthly Rollup) 5005618 (Security Only) Important Spoofing 5005090 Base: 8.8 Temporal: 7.9 Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 6.0.6003.21218 Yes 5005606 5005618 Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) 5005606 (Monthly Rollup) 5005618 (Security Only) Important Spoofing 5005090 Base: 8.8 Temporal: 7.9 Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 6.0.6003.21218 Yes 5005606 5005618 Windows Server 2008 R2 for x64-based Systems Service Pack 1 5005633 (Monthly Rollup) 5005615 (Security Only) Important Spoofing 5005088 Base: 8.8 Temporal: 7.9 Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 6.1.7601.25712 Yes 5005633 5005615 Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) 5005633 (Monthly Rollup) 5005615 (Security Only) Important Spoofing 5005088 Base: 8.8 Temporal: 7.9 Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 6.1.7601.25712 Yes 5005633 5005615 Windows Server 2012 5005623 (Monthly Rollup) 5005607 (Security Only) Important Spoofing 5005094 Base: 8.8 Temporal: 7.9 Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 6.2.9200.23462 Yes 5005623 5005607 Windows Server 2012 (Server Core installation) 5005623 (Monthly Rollup) 5005607 (Security Only) Important Spoofing 5005094 Base: 8.8 Temporal: 7.9 Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 6.2.9200.23462 Yes 5005623 5005607 Windows Server 2012 R2 5005613 (Monthly Rollup) 5005627 (Security Only) 5005613 (Monthly Rollup) Important Spoofing 5005076 Base: 8.8 Temporal: 7.9 Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 6.3.9600.20120 Yes 5005613 5005627 5005613 Windows Server 2012 R2 (Server Core installation) 5005613 (Monthly Rollup) 5005627 (Security Only) 5005613 (Monthly Rollup) Important Spoofing 5005076 Base: 8.8 Temporal: 7.9 Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 6.3.9600.20120 Yes 5005613 5005627 5005613 Windows Server 2016 | 5005573 (Security Update) |
Important | Spoofing | Yes |
| Windows Server 2016 (Server Core installation) | 5005573 (Security Update) |
Important | Spoofing | Yes |
| Windows Server 2019 | 5005568 (Security Update) |
Important | Spoofing | Yes |
| Windows Server 2019 (Server Core installation) | 5005568 (Security Update) |
Important | Spoofing | Yes |
| Windows Server, version 1909 (Server Core installation) | 4598229 (Security Update) |
Important | Spoofing | Yes |
| Windows Server, version 2004 (Server Core installation) | 5005565 (Security Update) |
Important | Spoofing | Yes |
| Windows Server, version 20H2 (Server Core Installation) | 5005565 (Security Update) |
Important | Spoofing | Yes |
Patches
7 patches
| Article | Type | Restart |
|---|---|---|
5005569 |
Security Update | Yes |
5005573 |
Security Update | Yes |
4598245 |
Security Update | Yes |
5005568 |
Security Update | Yes |
5005566 |
Security Update | Yes |
5005565 |
Security Update | Yes |
4598229 |
Security Update | Yes |
Known Exploits
No known exploits have been linked for this CVE yet. When available, exploit references will be sourced from public repositories and may be unverified, incomplete, or non-functional. Always review code carefully before use in any environment.
Acknowledgments
References
On This Page