CVE-2021-35449

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2021-07-19 · updated 2026-06-17
Weakness: CWE-732

Description

The Lexmark Universal Print Driver version 2.15.1.0 and below, G2 driver 2.7.1.0 and below, G3 driver 3.2.0.0 and below, and G4 driver 4.2.1.0 and below are affected by a privilege escalation vulnerability. A standard low priviliged user can use the driver to execute a DLL of their choosing during the add printer process, resulting in escalation of privileges to SYSTEM.

Affected products

Lexmark G2 Driver: through 2.7.1.0
Lexmark G3 Driver: through 3.2.0.0
Lexmark G4 Driver: through 4.2.1.0
Lexmark Universal Print Driver: through 2.15.1.0

References

http://packetstormsecurity.com/files/163811/Lexmark-Driver-Privilege-Escalation.html
http://support.lexmark.com/alerts/
https://raw.githubusercontent.com/jacob-baines/vuln_disclosure/main/vuln_2021_02.txt
http://packetstormsecurity.com/files/163811/Lexmark-Driver-Privilege-Escalation.html
http://support.lexmark.com/alerts/
https://raw.githubusercontent.com/jacob-baines/vuln_disclosure/main/vuln_2021_02.txt

Get alerted when CVE-2021-35449 or the next vulnerability affects your stack