CVE-2021-21698 is a vulnerability that was discovered in the Windows Print Spooler service. This flaw could allow attackers to remotely execute code on a vulnerable system, potentially giving them access to sensitive data or control of the system. The vulnerability was given a CVSS score of 7.8 out of 10, indicating that it is a high-severity vulnerability.
Microsoft released a patch for this vulnerability as part of its June 2021 security updates. However, it was later revealed that the patch was incomplete and did not fully address the vulnerability. This led to a situation where many systems were still vulnerable, even after the patch had been applied. In response, Microsoft released additional patches in June and July of 2021 to fully address the vulnerability.
The discovery of CVE-2021-21698 highlights the ongoing need for organizations to stay vigilant about software vulnerabilities and apply patches promptly. It also underscores the importance of thorough testing before releasing patches to ensure they effectively address the underlying vulnerability. In this case, the incomplete patch may have put many systems at risk of attack, despite users believing they were protected.