The bug (CVE-2021-3438) has lurked in systems for 16 years, researchers at SentinelOne said. It carries an 8.8 out of 10 rating on the CVSS scale, making it high-severity. The bug could allow cyberattackers to bypass security products, tamper with data and run code in kernel mode. Some Windows machines may already have the vulnerable driver without even running a dedicated installation file, researchers warned. So far, no in-the-wild attacks have been observed.
Source: https://threatpost.com/hp-printer-driver-bug-windows/167944/