peter bassill · operator
$ cve CVE-2021-1675 JSON

CVE-2021-1675 KEV

7.8
HIGH · CVSS 3.1 · EPSS 85.3% (pctl 100)

Patch first

On CISA KEV — known exploited in the wild, due 2021-11-17.

Description

Windows Print Spooler Remote Code Execution Vulnerability

Scoring

CVSS7.8 (HIGH, v3.1)
VectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS85.31% — more likely to be exploited than 100% of all CVEs
On CISA KEVyes — remediate by 2021-11-17
Public exploitnone known
Published2021-06-08
Last modified2026-08-12

CISA KEV

NameMicrosoft Windows Print Spooler Remote Code Execution Vulnerability
Added2021-11-03
Due2021-11-17
Vendor / productMicrosoft / Windows
Ransomware useknown

Affected (15)

VendorProduct
microsoftwindows 10 1507
microsoftwindows 10 1607
microsoftwindows 10 1809
microsoftwindows 10 1909
microsoftwindows 10 2004
microsoftwindows 10 20h2
microsoftwindows 10 21h1
microsoftwindows 7
microsoftwindows 8.1
microsoftwindows rt 8.1
microsoftwindows server 2004
microsoftwindows server 2008
microsoftwindows server 2012
microsoftwindows server 2016
microsoftwindows server 2019

References

→ the Explorer  ·  watch your stack  ·  NVD