CVE-2021-31166
HTTP Protocol Stack Remote Code Execution Vulnerability
KEVCRITICAL 9.8EPSS 99.9%
HTTP Protocol Stack Remote Code Execution Vulnerability
- Affected
- Microsoft · Windows 10 Version 2004 · Windows Server version 2004 · Windows 10 Version 20H2 · Windows Server version 20H2
- CVSS v3.1 NVD
- 9.8 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS v2.0 NVD
- 7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P - EPSS
- 99.87% chance of exploitation in the next 30 days, 100th percentile
- CISA KEV
- added 2022-04-06
- Published
- 2021-05-11
- Updated
- 2025-10-21
Proof-of-concept exploits (12)
- 0vercl0k/CVE-2021-31166823★ · 2021-06-12
- 0xmaximus/Home-Demolisher8★ · 2022-12-08
- ZZ-SOCMAP/CVE-2021-3116619★ · 2021-11-04
- antx-code/CVE-2021-3116619★ · 2021-11-04
- bgsilvait/WIn-CVE-2021-311660★ · 2021-05-23
- corelight/CVE-2021-3116612★ · 2024-10-17
- liang2kl/iot-exploits3★ · 2023-07-26
- mauricelambert/CVE-2021-311666★ · 2022-03-16
- mauricelambert/CVE-2022-479861★ · 2023-03-09
- y0g3sh-99/CVE-2021-31166-Exploit7★ · 2021-07-03
- zecopro/CVE-2021-311665★ · 2021-05-19
- zha0gongz1/CVE-2021-311668★ · 2021-05-17
Metasploit modules (1)
Exploit collections (1)
- HTTP协议栈远程代码执行漏洞（CVE-2021-31166）.mdtzwlhack/Vulnerability
Security advisories
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-31166
- http://packetstormsecurity.com/files/162722/Microsoft-HTTP-Protocol-Stack-Remote-Code-Exe…