Vulnerability Intelligence

🛡 CVE-2021-34527

📈 EPSS exploit probability

⚠ KEV remediation overdue

CISA required federal remediation by 2022-05-03. This exploited vulnerability is past its Binding Operational Directive 22-01 due date — prioritize patch/mitigation and hunt for exploitation.

📄 Description

Microsoft Windows Print Spooler contains an unspecified vulnerability due to the Windows Print Spooler service improperly performing privileged file operations. Successful exploitation allows an attacker to perform remote code execution wit

🏹 Attributed exploitation

Malware / ransomware (KEV): Vice Society, Magniber, Conti (PrintNightmare)

Threat actors (KEV): Vice Society

🔗 External references & OSINT

🔄 Internal pivots & actions

🛡 Add to case

🗃 Data Management

🧩 Advanced Capabilities