CVE-2021-1675
Windows Print Spooler Remote Code Execution Vulnerability
- Score
- CVSS 3.1 7.8 High
- Status
- Analyzed - secure@microsoft.com
- Published
- 2021-06-08
- Last modified
- 2026-08-12
- Known exploited (CISA KEV)
- since 2021-11-03, action due 2021-11-17: Apply updates per vendor instructions.
Affected products
- Windows 10 1507 (Microsoft)
- Windows 10 1607 (Microsoft)
- Windows 10 1809 (Microsoft)
- Windows 10 1909 (Microsoft)
- Windows 10 2004 (Microsoft)
- Windows 10 20H2 (Microsoft)
- Windows 10 20h2 (Microsoft)
- Windows 10 21H1 (Microsoft)
- Windows 10 21h1 (Microsoft)
- Windows 7 (Microsoft)
- Windows 8.1 (Microsoft)
- Windows Rt 8.1 (Microsoft)
- Windows Server 2004 (Microsoft)
- Windows Server 2008 (Microsoft)
- Windows Server 2008 R2 (Microsoft)
- Windows Server 2008 Sp2 (Microsoft)
- Windows Server 2012 (Microsoft)
- Windows Server 2012 R2 (Microsoft)
- Windows Server 2016 (Microsoft)
- Windows Server 2019 (Microsoft)
- Windows Server 20H2 (Microsoft)
References
- http://packetstormsecurity.com/files/163349/Microsoft-PrintNightmare-Proof-Of-Concept.html
- http://packetstormsecurity.com/files/163351/PrintNightmare-Windows-Spooler-Service-Remote-Code-Execution.html
- http://packetstormsecurity.com/files/167261/Print-Spooler-Remote-DLL-Injection.html
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1675
- https://www.kb.cert.org/vuls/id/383432
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-1675
