CVE-2026-58608Patch(microsoft / windows_10_1607)

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch microsoft windows_10_1607 systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Print Spooler Components allows an authorized attacker to execute code over a network.

1.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-362CWE-416

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • windows_10_1607
  • windows_10_1809
  • windows_10_21h2
  • windows_10_22h2

Threat summary

  • Patch or workaround signal is available
  • 4 mentions across 4 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 4 signals
  • Disclosure: 2 classified signals
  • Peaked 3d ago at 1 mentions (2026-07-15); latest day: 1
  • 4 total mentions across 4 days

Affected systems

Vendors
Products
windows_10_1607windows_10_1809windows_10_21h2windows_10_22h2windows_11_24h2windows_11_25h2windows_11_26h1windows_server_2012windows_server_2016windows_server_2019

2 versions affected across 12 products

Deep dive

Activity timeline4 mentions / 4d
00111Mentions · 2026-07-15: 1Mentions · 2026-07-20: 1Mentions · 2026-07-28: 1Mentions · 2026-08-10: 1Patch / Workaround · 2026-07-15: 1Patch / Workaround · 2026-07-28: 1Technical Details · 2026-07-15: 1Technical Details · 2026-07-20: 1Technical Details · 2026-07-28: 1Technical Details · 2026-08-10: 107-1507-2007-2808-10
Signal classification2 categories
Patch
250.0%
Disclosure
250.0%
Referenced assets5 URLs
Classification over time
DateTotalLabels
2026-07-151
Patch1
2026-07-201
Disclosure1
2026-07-281
Patch1
2026-08-101
Disclosure1
Full discourse4 posts
  • DailyCVE@dailycve
    Disclosure

    🔴 #Windows Print Spooler Remote Code Execution, #CVE-2026-58608 (Critical) -DC-Jul2026-1100 https://dailycve.com/windows-print-spooler-remote-code-execution-cve-2026-58608-critical-dc-jul2026-1100/

    Post summary

    An announcement of a critical Windows Print Spooler Remote Code Execution vulnerability (CVE‑2026‑58608).

    0001073
    220 followersView on X
  • IntegSec@integ_sec
    Disclosure

    CVE-2026-58608: Windows Print Spooler Race Condition - What It Means for Your Business and How to Respond https://hubs.li/Q04stKJJ0

    Post summary

    The article announces CVE‑2026‑58608, identifies it as a race condition in Windows Print Spooler, and promises guidance on business response.

    0000043
    32 followersView on X
  • Vicarius@vicariusltd
    Patch

    It is said Odysseus landed on the island of Print Spooler 📜 _____ CVE of the Week CVE-2026-58608: High-Severity RCE Vulnerability in Windows Print Spooler Caused by improper synchronization and race condition flaws (CWE-362 / CWE-416), this vulnerability allows an authenticated, low-privileged attacker to execute arbitrary code over the network without requiring any user interaction. Why it matters: - Remote code execution (RCE) with elevated privileges on target Windows endpoints and servers. - Complete host compromise and unauthorized access to corporate network resources. Recommended actions: 1. Install the official July 2026 Patch Tuesday security updates across affected Windows 10, Windows 11, and Windows Server systems. 2. Disable the Print Spooler service on critical servers. Use these scripts from the Vicarius research team: - Detection: https://www.vicarius.io/vsociety/posts/cve-2026-58608-detection-script-race-condition-in-windows-print-spooler-leading-to-rce - Remediation: https://www.vicarius.io/vsociety/posts/cve-2026-58608-mitigation-script-race-condition-in-windows-print-spooler-leading-to-rce Let us know if you need help securing your systems or understanding these steps further. Shoutout to @orange_8361 for the discovery!

    Post summary

    The tweet discloses a high‑severity RCE flaw in Windows Print Spooler, provides patch guidance and mitigation scripts, yet offers no exploit code or evidence of active exploitation.

    0000079
    2.0K followersView on X
  • Windows Forum@windowsforum
    Patch

    🪟 July patches fix a high-severity Print Spooler RCE, because Windows still treats printing like a remote-code execution subscription. Patch now—your office printer doesn’t need a hacker side quest. https://windowsforum.com/threads/cve-2026-58608-july-updates-fix-windows-print-spooler-rce.438294/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #WindowsSecurity #PrintSpooler #PatchManagement https://t.co/GmSkDh4mI1

    Post summary

    The post announces that July patches address a high‑severity Print Spooler Remote‑Code‑Execution vulnerability (CVE‑2026‑58608), encouraging users to update.

    0000048
    1.2K followersView on X
CPE platform detail22 entries

22 of 22 entries

PartVendorProductVersionTarget SWTarget HW
OSmicrosoftwindows_10_1607--x64
OSmicrosoftwindows_10_1607--x86
OSmicrosoftwindows_10_1809--x64
OSmicrosoftwindows_10_1809--x86
OSmicrosoftwindows_10_21h2--arm64
OSmicrosoftwindows_10_21h2--x64
OSmicrosoftwindows_10_21h2--x86
OSmicrosoftwindows_10_22h2--arm64
OSmicrosoftwindows_10_22h2--x64
OSmicrosoftwindows_10_22h2--x86
OSmicrosoftwindows_11_24h2--arm64
OSmicrosoftwindows_11_24h2--x64
OSmicrosoftwindows_11_25h2--arm64
OSmicrosoftwindows_11_25h2--x64
OSmicrosoftwindows_11_26h1--arm64
OSmicrosoftwindows_11_26h1--x64
OSmicrosoftwindows_server_2012---
OSmicrosoftwindows_server_2012r2--
OSmicrosoftwindows_server_2016---
OSmicrosoftwindows_server_2019---
OSmicrosoftwindows_server_2022---
OSmicrosoftwindows_server_2025---

Explore more