Privilege Escalation in Lexmark Universal Print Driver and Related G2, G3, and G4 Drivers
CVE-2021-35449

7.8HIGH

Key Information:

Vendor: Lexmark
Status: G4 Driver; G3 Driver; G2 Driver; Universal Print Driver
Vendor: CVE Published:; 19 July 2021

What is CVE-2021-35449?

A privilege escalation vulnerability exists within the Lexmark Universal Print Driver and its related drivers, which allows a standard low-privileged user to leverage the driver during the printer installation process. By doing so, they can execute a Dynamic Link Library (DLL) of their choice, ultimately leading to an escalation of privileges to the SYSTEM level. This can allow unauthorized control over the system and poses significant security risks.