CVE-2021-1675
ENISA EUVD: EUVD-2021-7142 ↗
Exploited in the Wild
✓ Confirmed 0-Day
Triaged: March 5, 2026
10 articles
EPSS Score
Source: FIRST.org · 2026-05-24
94.31%
probability
This CVE has a 94.31% probability
of being exploited in the next 30 days.
0%
Top 100.0th percentile of all CVEs
100%
CVSS v3.1
Source: NVD7.8
Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Temporal
Exploit Code Maturity
Unproven
Remediation Level
Official Fix
Report Confidence
Confirmed
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Affected Products
Exploits & PoC
cube0x0/CVE-2021-1675
C# and Impacket implementation of PrintNightmare CVE-2021-1675/CVE-2021-34527
1980
calebstewart/CVE-2021-1675
Pure PowerShell implementation of CVE-2021-1675 Print Spooler Local Privilege Escalation (PrintNightmare)
1099
ly4k/PrintNightmare
Python implementation for PrintNightmare (CVE-2021-1675 / CVE-2021-34527)
208
cybersecurityworks553/CVE-2021-1675_PrintNightMare
PoC CVE-2021-1675 — cybersecurityworks553/CVE-2021-1675_PrintNightMare
23
4 repos — triés par ⭐
Rechercher sur GitHub ↗
Microsoft shares mitigations for Windows PrintNightmare zero-day bug
BleepingComputer
Jul 02, 2021
Microsoft June 2021 Patch Tuesday fixes 6 exploited zero-days, 50 flaws
BleepingComputer
Jun 08, 2021
Public Windows PrintNightmare 0-day exploit allows domain takeover
BleepingComputer
Jun 30, 2021
CISA: Disable Windows Print Spooler on servers not used for printing
BleepingComputer
Jul 01, 2021
Qualys Response to CISA Alert: Binding Operational Directive 22-01
Qualys
Nov 09, 2021
Microsoft & Adobe Patch Tuesday (June 2021) – Microsoft 50 Vulnerabilities with 5 Critical, Adobe 21 Critical Vulnerabilities
Qualys
Jun 08, 2021
Security Advisory 2021-033
CERT-EU
Jun 30, 2021
Signal Intelligence
Confidence
75%
EPSS
94.31%
CVSS v3.1
7.8
Mentions
10
Last Seen
Nov 09, 2021
CNA Information
Analyst Note
CVE-2021-1675 is the PrintNightmare Windows Print Spooler RCE vulnerability. Published June 8, 2021, it was actively exploited in the wild before Microsoft released patches on June 8 and subsequent updates. The vulnerability became widely documented as a zero-day with proof-of-concept exploitation occurring before official patches were fully deployed, meeting the core zero-day criteria despite limited article coverage in this dataset.
Threat Actors 9
Turla Group
apt_group
Information theft and espionage
Russian Federation
APT 29
apt_group
Information theft and espionage
🇷🇺 RU
Cobalt
apt_group
Financial crime
🇷🇺 RU
APT32
apt_group
Information theft and espionage
🇻🇳 VN
Kimsuky
apt_group
Information theft and espionage
🇰🇷 KR
Hacking Team
apt_group
🇮🇹 IT
Earth Lamia
apt_group
Information theft and espionage
🇨🇳 CN
WildPressure
apt_group
Information theft and espionage
UNKNOWN
APT 5
apt_group
Information theft and espionage
🇨🇳 CN
Triage Info
Decided atMar 05, 2026