CVE-2021-1675
Windows Print Spooler Remote Code Execution Vulnerability
KEV RANSOMWAREHIGH 7.8EPSS 85.3%
Windows Print Spooler Remote Code Execution Vulnerability
- Affected
- Microsoft · Windows 10 Version 1809 · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1909 · Windows 10 Version 21H1 · Windows 10 Version 2004
- CVSS v3.1 NVD
- 7.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS v2.0 NVD
- 9.3 HIGH
AV:N/AC:M/Au:N/C:C/I:C/A:C - EPSS
- 85.30% chance of exploitation in the next 30 days, 100th percentile
- CISA KEV
- added 2021-11-03, used in ransomware campaigns
- Published
- 2021-06-08
- Updated
- 2026-08-12
Proof-of-concept exploits (57)
- http://packetstormsecurity.com/files/163349/Microsoft-PrintNightmare-Proof-Of-Concept.html
- http://packetstormsecurity.com/files/167261/Print-Spooler-Remote-DLL-Injection.html
- 000Tonio/cve-2021-16750★ · 2022-11-07
- 0xSs0rZ/Windows_Exploit0★ · 2024-06-05
- 4RG0S/2021-Summer-Some-Day-Exploit0★ · 2021-08-28
- AndrewTrube/CVE-2021-16755★ · 2022-01-30
- DLL00P/CVE-2021-16751★ · 2025-07-29
- HarshRajSinghania/smbvulnrecon0★ · 2024-11-25
- LaresLLC/CVE-2021-1675214★ · 2023-05-20
- OppressionBreedsResistance/CVE-2021-1675-PrintNightmare1★ · 2021-10-06
- RarW0lf/PrintNightmare-BB-Payload2★ · 2021-07-04
- SecuProject/NetworkInfoGather3★ · 2023-09-22
- TheJoyOfHacking/calebstewart-CVE-2021-16752★ · 2022-02-22
- TheJoyOfHacking/cube0x0-CVE-2021-16750★ · 2022-02-22
- Winter3un/CVE-2021-16751★ · 2021-07-20
- auduongxuan/CVE-2022-268097★ · 2022-04-14
- bartimus-primed/CVE-2021-1675-Yara2★ · 2021-07-08
- bartimusprimed/CVE-2021-1675-Yara2★ · 2021-07-08
- calebstewart/CVE-2021-16751109★ · 2021-07-05
- corelight/CVE-2021-16759★ · 2024-09-03
- crtaylor315/PrintNightmare-Before-Halloween0★ · 2021-10-24
- cube0x0/CVE-2021-16752003★ · 2021-07-20
- cybersecurityworks553/CVE-2021-1675_PrintNightMare23★ · 2021-11-18
- d0nkeyk0ng787/PrintNightmare-POC1★ · 2023-09-14
- demilson/spoolsv0★ · 2021-06-30
- edsonjt81/CVE-2021-16750★ · 2022-12-27
- eversinc33/NimNightmare18★ · 2021-12-05
- evilashz/CVE-2021-1675-LPE-EXP56★ · 2021-07-02
- exploitblizzard/PrintNightmare-CVE-2021-16755★ · 2021-07-04
- galoget/PrintNightmare-CVE-2021-1675-CVE-2021-345270★ · 2021-07-12
- gyaansastra/Print-Nightmare-LPE20★ · 2021-07-02
- hahaleyile/my-CVE-2021-16753★ · 2021-08-13
- hlldz/CVE-2021-1675-LPE326★ · 2021-07-05
- initconf/cve-2021-1675-printnightmare0★ · 2021-07-03
- k8gege/cve-2021-167515★ · 2021-07-11
- killtr0/CVE-2021-1675-PrintNightmare2★ · 2021-07-02
- kougyokugentou/CVE-2021-16750★ · 2021-07-02
- mrezqi/CVE-2021-1675_CarbonBlack_HuntingQuery0★ · 2021-07-02
- mstxq17/CVE-2021-1675_RDL_LPE144★ · 2021-09-01
- nathanealm/PrintNightmare-Exploit43★ · 2023-05-31
- naujpr/printnightmare0★ · 2021-07-06
- nemo-wq/PrintNightmare-CVE-2021-34527177★ · 2021-09-13
- peckre/PNCVE-Win10-20H2-Exploit1★ · 2024-01-17
- puckiestyle/CVE-2021-16751★ · 2021-10-31
- real-acmkan/docker-printernightmare4★ · 2021-07-01
- rnbochsr/atlas0★ · 2021-10-10
- sailay1996/PrintNightmare-LPE75★ · 2021-07-05
- tanarchytan/CVE-2021-16750★ · 2021-07-02
- thalpius/Microsoft-CVE-2021-16750★ · 2026-08-02
- thomasgeens/CVE-2021-16753★ · 2021-07-02
- whoami-chmod777/CVE-2021-1675---PrintNightmare-LPE-PowerShell-0★ · 2024-02-12
- whoami-chmod777/CVE-2021-1675-CVE-2021-345271★ · 2024-02-12
- zha0/Microsoft-CVE-2021-16750★ · 2021-07-18
- ccordeiro/CVE-2021-16750★ · 2025-11-19
- HKenzoKimura/CVE-2021-16750★ · 2026-09-06
- pentagon404uzb/CVE-2021-1675-Local-Privilege-Escalation-CVSS-7.8-1★ · 2026-09-25
- kairosart/VulnActive0★ · 2026-10-12
Metasploit modules (1)
Security advisories
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1675
- http://packetstormsecurity.com/files/163351/PrintNightmare-Windows-Spooler-Service-Remote…
- https://www.kb.cert.org/vuls/id/383432