What happened
Microsoft Windows Print Spooler contains an unspecified vulnerability that allows for remote code execution.
Affected versions
Windows: See original advisory Fixed: See vendor advisory.
Why it matters
This source correlation may provide earlier visibility while structured CVE metadata is still being updated.
Detection & mitigation
- Review the original advisory and validate affected versions.
- Apply vendor-provided updates or mitigations when available.
Public PoC references
RepositoryAuthorFirst seenReference
PoC-in-GitHub · yu2u/CVE-2021-1675CVE-2021-1675 exploit★ 2yu2u2021-06-29CandidatePoC-in-GitHub · cube0x0/CVE-2021-1675C# and Impacket implementation of PrintNightmare CVE-2021-1675/CVE-2021-34527★ 2004cube0x02021-06-29CandidatePoC-in-GitHub · LaresLLC/CVE-2021-1675CVE-2021-1675 Detection Info★ 215LaresLLC2021-06-30CandidatePoC-in-GitHub · kondah/patch-cve-2021-1675★ 2kondah2021-06-30CandidatePoC-in-GitHub · evilashz/CVE-2021-1675-LPE-EXPPrintNightmare , Local Privilege Escalation of CVE-2021-1675 or CVE-2021-34527★ 56evilashz2021-07-01CandidatePoC-in-GitHub · hlldz/CVE-2021-1675-LPELocal Privilege Escalation Edition for CVE-2021-1675/CVE-2021-34527★ 324hlldz2021-07-01CandidatePoC-in-GitHub · puckiestyle/CVE-2021-1675★ 1puckiestyle2021-07-01CandidatePoC-in-GitHub · cybersecurityworks553/CVE-2021-1675_PrintNightMare★ 23cybersecurityworks5532021-07-01CandidatePoC-in-GitHub · tanarchytan/CVE-2021-1675Fix without disabling Print Spooler★ 0tanarchytan2021-07-01CandidatePoC-in-GitHub · calebstewart/CVE-2021-1675Pure PowerShell implementation of CVE-2021-1675 Print Spooler Local Privilege Escalation (PrintNightmare)★ 1110calebstewart2021-07-01CandidatePoC-in-GitHub · Leonidus0x10/CVE-2021-1675-SCANNERVulnerability Scanner for CVE-2021-1675/PrintNightmare★ 9Leonidus0x102021-07-02CandidatePoC-in-GitHub · thomasgeens/CVE-2021-1675★ 3thomasgeens2021-07-02CandidatePoC-in-GitHub · mrezqi/CVE-2021-1675_CarbonBlack_HuntingQuery★ 0mrezqi2021-07-02CandidatePoC-in-GitHub · killtr0/CVE-2021-1675-PrintNightmare★ 2killtr02021-07-02CandidatePoC-in-GitHub · corelight/CVE-2021-1675★ 9corelight2021-07-02CandidatePoC-in-GitHub · kougyokugentou/CVE-2021-1675A small powershell script to disable print spooler service using desired state configuration★ 0kougyokugentou2021-07-02CandidatePoC-in-GitHub · ptter23/CVE-2021-1675CVE-2021-1675: ZERO-DAY VULNERABILITY IN WINDOWS PRINTER SERVICE WITH AN EXPLOIT AVAILABLE IN ALL OPERATING SYSTEM VERSIONS★ 0ptter232021-07-02CandidatePoC-in-GitHub · initconf/cve-2021-1675-printnightmareto catch cve-2021-1675-printnightmare★ 0initconf2021-07-03CandidatePoC-in-GitHub · ozergoker/PrintNightmareWindows Print Spooler Service RCE CVE-2021-1675 (PrintNightmare)★ 2ozergoker2021-07-03CandidatePoC-in-GitHub · exploitblizzard/PrintNightmare-CVE-2021-1675Youtube : https://youtu.be/Zr0KjYDSFKQ★ 5exploitblizzard2021-07-04CandidatePoC-in-GitHub · edsonjt81/CVE-2021-1675★ 0edsonjt812021-07-05CandidatePoC-in-GitHub · sailay1996/PrintNightmare-LPECVE-2021-1675 (PrintNightmare)★ 75sailay19962021-07-05CandidatePoC-in-GitHub · JumpsecLabs/PrintNightmareInformation on the Windows Spooler vulnerability - CVE-2021-1675; CVE 2021 34527★ 19JumpsecLabs2021-07-07CandidatePoC-in-GitHub · bartimusprimed/CVE-2021-1675-Yara★ 2bartimusprimed2021-07-08CandidatePoC-in-GitHub · k8gege/cve-2021-1675★ 15k8gege2021-07-11CandidatePoC-in-GitHub · galoget/PrintNightmare-CVE-2021-1675-CVE-2021-34527CVE-2021-1675 / CVE-2021-34527 - PrintNightmare Python, C# and PowerShell Exploits Implementations (LPE & RCE)★ 0galoget2021-07-12CandidatePoC-in-GitHub · thalpius/microsoft-cve-2021-1675★ 0thalpius2021-07-16CandidatePoC-in-GitHub · zha0/Microsoft-CVE-2021-1675★ 0zha02021-07-18CandidatePoC-in-GitHub · Winter3un/CVE-2021-1675★ 1Winter3un2021-07-20CandidatePoC-in-GitHub · hahaleyile/my-CVE-2021-1675see https://github.com/cube0x0/CVE-2021-1675★ 3hahaleyile2021-07-22CandidatePoC-in-GitHub · mstxq17/CVE-2021-1675_RDL_LPEPrintNightMare LPE提权漏洞的CS 反射加载插件。开箱即用、通过内存加载、混淆加载的驱动名称来ByPass Defender/EDR。★ 144mstxq172021-09-01CandidatePoC-in-GitHub · ly4k/PrintNightmarePython implementation for PrintNightmare (CVE-2021-1675 / CVE-2021-34527)★ 215ly4k2021-09-26CandidatePoC-in-GitHub · Wra7h/SharpPNC# PrintNightmare (CVE-2021-1675)★ 9Wra7h2021-09-26CandidatePoC-in-GitHub · OppressionBreedsResistance/CVE-2021-1675-PrintNightmareWorking PowerShell POC★ 1OppressionBreedsResistance2021-10-05CandidatePoC-in-GitHub · eversinc33/NimNightmareCVE-2021-1675 LPE PoC in Nim (PrintNightmare Local Privilege Escalation)★ 18eversinc332021-12-05CandidatePoC-in-GitHub · AndrewTrube/CVE-2021-1675PrintNightmare Local Privilege Escalation★ 5AndrewTrube2022-01-30CandidatePoC-in-GitHub · TheJoyOfHacking/cube0x0-CVE-2021-1675★ 0TheJoyOfHacking2022-02-22CandidatePoC-in-GitHub · TheJoyOfHacking/calebstewart-CVE-2021-1675★ 2TheJoyOfHacking2022-02-22CandidatePoC-in-GitHub · r1skkam/PrintNightmareLearn about the vulnerability known as PrintNightmare (CVE-2021-1675) and (CVE-2021-34527)★ 0r1skkam2022-12-28CandidatePoC-in-GitHub · 000Tonio/cve-2021-1675★ 0000Tonio2023-10-19CandidatePoC-in-GitHub · peckre/PNCVE-Win10-20H2-ExploitA one-click script to gain a System privileges command line in Windows 10 20H2 that exploits CVE-2021-1675★ 1peckre2024-01-17CandidatePoC-in-GitHub · whoami-chmod777/CVE-2021-1675-CVE-2021-34527★ 1whoami-chmod7772024-02-12CandidatePoC-in-GitHub · whoami-chmod777/CVE-2021-1675---PrintNightmare-LPE-PowerShell-★ 0whoami-chmod7772024-02-12CandidatePoC-in-GitHub · 0xSs0rZ/Windows_ExploitCVE-2021-1675/CVE-2021-34527 PrintNightmare & CVE-2020-0668★ 00xSs0rZ2024-06-05CandidatePoC-in-GitHub · Sp4ceDogy/NPE-CS-V-CVE-2021-1675★ 0Sp4ceDogy2025-03-10CandidatePoC-in-GitHub · DLL00P/CVE-2021-1675★ 1DLL00P2025-07-29CandidatePoC-in-GitHub · ccordeiro/CVE-2021-1675C# and Impacket implementation of PrintNightmare CVE-2021-1675/CVE-2021-34527★ 0ccordeiro2025-11-19CandidatePoC-in-GitHub · VelesSecurity/CVE-2021-1675-PrintNightmare-Analysis★ 0VelesSecurity2026-08-18CandidatePoC-in-GitHub · HKenzoKimura/CVE-2021-1675Simulated PoC — PrintNightmare Windows Print Spooler RCE/LPE (CVE-2021-1675 + CVE-2021-34527). Non-functional payload for detection engineering. CISA KEV · Patched July 2021 · MITRE T1068.★ 0HKenzoKimura2026-09-06CandidatePoC-in-GitHub · pentagon404uzb/CVE-2021-1675-Local-Privilege-Escalation-CVSS-7.8-★ 1pentagon404uzb2026-09-25CandidateSource timeline
Discovered through CISA Known Exploited VulnerabilitiesView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Record history
Record created from the first normalized source observation.
Metadata and source references refreshed.