VDB

VAR-202106-0639

VAR-202106-0639 PUBLISHED CVSS 7.800000190734863 HIGH

Record from circl · Published January 22, 2021

Windows Print Spooler Remote Code Execution Vulnerability

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

PackageEcosystemFixed in
Windows Server 2012Microsoft6.2.9200.23372
Windows 10 Version 20H2Microsoft10.0.19042.1052
Windows 10 Version 21H1Microsoft10.0.19043.1052
Windows Server version 20H2Microsoft10.0.19042.1052
Windows 7 Service Pack 1Microsoft6.1.7601.25632
Windows 10 Version 1909Microsoft10.0.18363.1621
Windows Server 2012 R2Microsoft6.3.9600.20045, 6.3.9600.20044
Windows Server 2012 R2 (Server Core installation)Microsoft6.3.9600.20045, 6.3.9600.20044
Windows 10 Version 1507Microsoft10.0.10240.18967
Windows Server 2019 (Server Core installation)Microsoft10.0.17763.1999
Windows 10 Version 1809Microsoft10.0.17763.1999
Windows Server 2008 R2 Service Pack 1Microsoft6.1.7601.25632

13 more packages have a fixed version. See every fix in Lookup.

Risk scores

CVSS 3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Affected products

VendorProductVersions
MicrosoftWindows Server 20126.2.0
MicrosoftWindows 10 Version 20H210.0.0
MicrosoftWindows 10 Version 21H110.0.0
MicrosoftWindows Server version 20H210.0.0
MicrosoftWindows 7 Service Pack 16.1.0
MicrosoftWindows 10 Version 190910.0.0
MicrosoftWindows Server 2012 R26.3.0, 6.3.0
MicrosoftWindows Server 2012 R2 (Server Core installation)6.3.0, 6.3.0
MicrosoftWindows 10 Version 150710.0.0
MicrosoftWindows Server 2019 (Server Core installation)10.0.0
MicrosoftWindows 10 Version 180910.0.0
MicrosoftWindows Server 2008 R2 Service Pack 16.1.0
MicrosoftWindows Server version 200410.0.0
MicrosoftWindows 10 Version 200410.0.0
MicrosoftWindows Server 2008 Service Pack 2 (Server Core installation)6.0.0
MicrosoftWindows 76.1.0
MicrosoftWindows Server 2016 (Server Core installation)10.0.0
MicrosoftWindows Server 2008 Service Pack 26.0.0
MicrosoftWindows Server 201610.0.0
MicrosoftWindows 8.16.3.0, 6.3.0

…and 5 more

Timeline

  • Jan 22, 2021 CVE Published
  • Jul 1, 2021 PoC Published (29 in total, the first dated here)
  • Apr 16, 2026 Security Advisory

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln VAR-202106-0639
vulnetix vdb fixes VAR-202106-0639

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/VAR-202106-0639/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›