CVE-2021-1675highunder attackransomware

CVE-2021-1675: high-severity vulnerability in Microsoft Windows 10 Version 1507

Windows Print Spooler Remote Code Execution Vulnerability

Published · Updated

Follow this CVE+ Monitor Windows Server+ Monitor Windows

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

100Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 7.8epss 85%
from disclosure to weapon21 days
Published on NVDJun 8
1st PoC+21d
metasploitJun 8
CISA KEV+148d
Action required by CISAfederal deadline: 2021-11-17

Apply updates per vendor instructions.

In short

A vulnerability in Windows Print Spooler allows attackers to run malicious code remotely on a computer without needing special permissions. An attacker can exploit this by sending specially crafted requests to the print service, potentially taking complete control of the affected system.

Technical detail

The Windows Print Spooler service fails to properly validate client requests, allowing unauthenticated remote code execution via the RPC interface. An attacker can send a malicious print job or RPC call that triggers arbitrary code execution with SYSTEM privileges, requiring only network access to port 445 or similar print service endpoints.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

Windows Print Spooler Remote Code Execution Vulnerability
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Affected products
Microsoft · Windows 10 Version 1507Microsoft · Windows 10 Version 1607Microsoft · Windows 10 Version 1809Microsoft · Windows 10 Version 1909Microsoft · Windows 10 Version 2004Microsoft · Windows 10 Version 20H2Microsoft · Windows 10 Version 21H1Microsoft · Windows 7Microsoft · Windows 7 Service Pack 1Microsoft · Windows 8.1Microsoft · Windows Server 2008 R2 Service Pack 1Microsoft · Windows Server 2008 R2 Service Pack 1 (Server Core installation)Microsoft · Windows Server 2008 Service Pack 2Microsoft · Windows Server 2008 Service Pack 2Microsoft · Windows Server 2008 Service Pack 2 (Server Core installation)Microsoft · Windows Server 2012Microsoft · Windows Server 2012 R2Microsoft · Windows Server 2012 R2 (Server Core installation)Microsoft · Windows Server 2012 (Server Core installation)Microsoft · Windows Server 2016Microsoft · Windows Server 2016 (Server Core installation)Microsoft · Windows Server 2019Microsoft · Windows Server 2019 (Server Core installation)Microsoft · Windows Server version 2004Microsoft · Windows Server version 20H2
public PoCs found — 87
githubgithub.com/cube0x0/CVE-2021-1675★ 1990githubgithub.com/calebstewart/CVE-2021-1675★ 1100githubgithub.com/hlldz/CVE-2021-1675-LPE★ 325githubgithub.com/LaresLLC/CVE-2021-1675★ 214githubgithub.com/ly4k/PrintNightmare★ 209githubgithub.com/mstxq17/CVE-2021-1675_RDL_LPE★ 145githubgithub.com/sailay1996/PrintNightmare-LPE★ 77githubgithub.com/evilashz/CVE-2021-1675-LPE-EXP★ 56githubgithub.com/cybersecurityworks553/CVE-2021-1675_PrintNightMare★ 23githubgithub.com/JumpsecLabs/PrintNightmare★ 19githubgithub.com/eversinc33/NimNightmare★ 18githubgithub.com/k8gege/cve-2021-1675★ 15githubgithub.com/Wra7h/SharpPN★ 10githubgithub.com/Leonidus0x10/CVE-2021-1675-SCANNER★ 9githubgithub.com/corelight/CVE-2021-1675★ 9githubgithub.com/exploitblizzard/PrintNightmare-CVE-2021-1675★ 5githubgithub.com/thomasgeens/CVE-2021-1675★ 3githubgithub.com/hahaleyile/my-CVE-2021-1675★ 3githubgithub.com/yu2u/CVE-2021-1675★ 2githubgithub.com/killtr0/CVE-2021-1675-PrintNightmare★ 2githubgithub.com/ozergoker/PrintNightmare★ 2githubgithub.com/bartimusprimed/CVE-2021-1675-Yara★ 2githubgithub.com/kondah/patch-cve-2021-1675★ 2githubgithub.com/DLL00P/CVE-2021-1675★ 1githubgithub.com/puckiestyle/CVE-2021-1675★ 1githubgithub.com/OppressionBreedsResistance/CVE-2021-1675-PrintNightmare★ 1githubgithub.com/peckre/PNCVE-Win10-20H2-Exploit★ 1githubgithub.com/Winter3un/CVE-2021-1675★ 1githubgithub.com/whoami-chmod777/CVE-2021-1675-CVE-2021-34527★ 1githubgithub.com/initconf/cve-2021-1675-printnightmare★ 0githubgithub.com/tanarchytan/CVE-2021-1675★ 0githubgithub.com/mrezqi/CVE-2021-1675_CarbonBlack_HuntingQuery★ 0githubgithub.com/kougyokugentou/CVE-2021-1675★ 0githubgithub.com/ptter23/CVE-2021-1675★ 0githubgithub.com/edsonjt81/CVE-2021-1675★ 0githubgithub.com/galoget/PrintNightmare-CVE-2021-1675-CVE-2021-34527★ 0githubgithub.com/thalpius/microsoft-cve-2021-1675★ 0githubgithub.com/zha0/Microsoft-CVE-2021-1675★ 0githubgithub.com/r1skkam/PrintNightmare★ 0githubgithub.com/000Tonio/cve-2021-1675★ 0githubgithub.com/CameraShutterBug/PrintNightmare★ 0githubgithub.com/ccordeiro/CVE-2021-1675★ 0githubgithub.com/whoami-chmod777/CVE-2021-1675---PrintNightmare-LPE-PowerShell-★ 0githubgithub.com/0xSs0rZ/Windows_Exploit★ 0githubgithub.com/Sp4ceDogy/NPE-CS-V-CVE-2021-1675★ 0vulncheckvulncheck.com/xdb/4e7a1ede0f4cunverifiedvulncheckvulncheck.com/xdb/174100d1f234unverifiedcve_referencepacketstormsecurity.com/files/163351/PrintNightmare-Windows-Spooler-Service-Remote-Code-Execution.htmlunverifiedvulncheckvulncheck.com/xdb/b45e0ec89fbbunverifiedvulncheckvulncheck.com/xdb/d9dd26a5e43dunverifiedvulncheckvulncheck.com/xdb/cd6c3b06a60cunverifiedvulncheckvulncheck.com/xdb/b93501b21b35unverifiedvulncheckvulncheck.com/xdb/ea76e3b517daunverifiedvulncheckvulncheck.com/xdb/22ddb70101f9unverifiedvulncheckvulncheck.com/xdb/7cc2f4d6f2d5unverifiedvulncheckvulncheck.com/xdb/490a73431a10unverifiedvulncheckvulncheck.com/xdb/29f9009b9be9unverifiedvulncheckvulncheck.com/xdb/d01d428e5b4cunverifiedvulncheckvulncheck.com/xdb/3d814c23dd9dunverifiedvulncheckvulncheck.com/xdb/ded60e94a061unverifiedvulncheckvulncheck.com/xdb/a272e3e91f3aunverifiedvulncheckvulncheck.com/xdb/613d6b9bd25funverifiedvulncheckvulncheck.com/xdb/60402fe4962cunverifiedvulncheckvulncheck.com/xdb/a3f29455981bunverifiedvulncheckvulncheck.com/xdb/ddf90bbea093unverifiedvulncheckvulncheck.com/xdb/dcea18151317unverifiedvulncheckvulncheck.com/xdb/0c06ba53c498unverifiedvulncheckvulncheck.com/xdb/b90c284dc523unverifiedvulncheckvulncheck.com/xdb/462712fb0096unverifiedvulncheckvulncheck.com/xdb/0d51bca37337unverifiedvulncheckvulncheck.com/xdb/a45b8faa5940unverifiedvulncheckvulncheck.com/xdb/0300146c83c2unverifiedvulncheckvulncheck.com/xdb/da0d5a88e5dbunverifiedvulncheckvulncheck.com/xdb/97af0436c96dunverifiedvulncheckvulncheck.com/xdb/132e026d2027unverifiedvulncheckvulncheck.com/xdb/debfb4d8ee62unverifiedvulncheckvulncheck.com/xdb/381c98d00dfcunverifiedvulncheckvulncheck.com/xdb/6365096d731bunverifiedvulncheckvulncheck.com/xdb/a80f7a9e25f2unverifiedvulncheckvulncheck.com/xdb/ffee1c151af9unverifiedvulncheckvulncheck.com/xdb/5761c571065dunverifiedvulncheckvulncheck.com/xdb/fd141cadfdd9unverifiedcve_referencepacketstormsecurity.com/files/163349/Microsoft-PrintNightmare-Proof-Of-Concept.htmlunverifiedcve_referencepacketstormsecurity.com/files/167261/Print-Spooler-Remote-DLL-Injection.htmlunverifiedvulncheckvulncheck.com/xdb/b2ee9973a014unverifiedvulncheckvulncheck.com/xdb/35c8e00c7814unverifiedvulncheckvulncheck.com/xdb/3367f5a15c3eunverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Microsoft Windows 10 Version 1507

In the same product, most dangerous first.

CVE-2021-34527HIGHWindows Print Spooler Remote Code Execution VulnerabilityEPSS 99.8%KEVCVE-2023-36884HIGHWindows Search Remote Code Execution VulnerabilityEPSS 99.4%KEVCVE-2024-21412HIGHInternet Shortcut Files Security Feature Bypass VulnerabilityEPSS 99.4%KEVCVE-2022-30190HIGHMicrosoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution VulnerabilityEPSS 99.2%KEVCVE-2021-40444HIGHMicrosoft MSHTML Remote Code Execution VulnerabilityEPSS 97.8%KEVCVE-2023-36025HIGHWindows SmartScreen Security Feature Bypass VulnerabilityEPSS 88.2%KEV