CVE-2021-35449

The Lexmark Universal Print Driver version 2.15.1.0 and below, G2 driver 2.7.1.0 and below, G3 driver 3.2.0.0 and below, and G4 driver 4.2.1.0 and below are affected by a privilege escalation vulnerability. A standard low priviliged user can use the driver to execute a DLL of their choosing during the add printer process, resulting in escalation of privileges to SYSTEM.

• CWE-732

• http://packetstormsecurity.com/files/163811/Lexmark-Driver-Privilege-Escalation.htmlExploit, Third Party Advisory, VDB Entry
• http://support.lexmark.com/alerts/Vendor Advisory
• https://raw.githubusercontent.com/jacob-baines/vuln_disclosure/main/vuln_2021_02.txtThird Party Advisory
• http://packetstormsecurity.com/files/163811/Lexmark-Driver-Privilege-Escalation.htmlExploit, Third Party Advisory, VDB Entry
• http://support.lexmark.com/alerts/Vendor Advisory
• https://raw.githubusercontent.com/jacob-baines/vuln_disclosure/main/vuln_2021_02.txtThird Party Advisory

Published

Jul 19, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-3543A flaw null pointer dereference in the Nitro Enclaves kernel…6.7
• CVE-2021-35437SQL injection vulnerability in LMXCMS v.1.4 allows attacker …9.8
• CVE-2021-35438phpIPAM 1.4.3 allows Reflected XSS via app/dashboard/widgets…6.1
• CVE-2021-3544Several memory leaks were found in the virtio vhost-user GPU…6.5
• CVE-2021-35440Smashing 1.3.4 is vulnerable to Cross Site Scripting (XSS). …6.1
• CVE-2021-35448Emote Interactive Remote Mouse 3.008 on Windows allows attac…7.8
• CVE-2021-3545An information disclosure vulnerability was found in the vir…6.5
• CVE-2021-35450A Server Side Template Injection in the Entando Admin Consol…7.2
• CVE-2021-35451In Teradici PCoIP Management Console-Enterprise 20.07.0, an …6.1
• CVE-2021-35452An Incorrect Access Control vulnerability exists in libde265…6.5
• CVE-2021-35456Online Pet Shop We App 1.0 is vulnerable to remote SQL injec…9.8
• CVE-2021-35458Online Pet Shop We App 1.0 is vulnerable to Union SQL Inject…9.8