CVE-2021-1675VulnerabilityPublished 11/03/2021Updated 10/24/2026

CVE-2021-1675: Microsoft Windows Print Spooler Remote Code Execution Vulnerability

Affects Microsoft WindowsSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 11/03/2021
KEV deadline: 11/17/2021
Ransomware: Used in ransomware campaigns
EPSS: 85.3% chance of exploitation in 30 days – higher than 99% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2021-1675 (opens in a new tab)

Description

CVE-2021-1675 is a high-severity vulnerability in the Microsoft Windows Print Spooler service that allows remote code execution. It has been exploited in the wild and is known to have been used in ransomware campaigns. The vulnerability involves an unspecified flaw in the Print Spooler, which could allow an attacker to execute code remotely with elevated privileges.

Summary

Microsoft Windows Print Spooler contains an unspecified vulnerability (CVE-2021-1675) that enables remote code execution. This vulnerability has been actively exploited in the wild and has been leveraged in ransomware attacks. The flaw relates to improper access control (CWE-285) within the Print Spooler service, potentially allowing attackers to execute arbitrary code remotely. No specific affected versions or patch information are provided in the input data.

Impact

Successful exploitation of this vulnerability allows remote attackers to execute arbitrary code on affected Windows systems, potentially leading to full system compromise. It has been confirmed to be exploited in the wild and used in ransomware campaigns, indicating significant real-world impact and risk.

Mitigation

Patch status is not yet confirmed — check the Microsoft vendor advisory for current remediation guidance. Since no patch or workaround information is provided, organizations should monitor official Microsoft communications for updates and apply security updates as soon as they become available.

Weaknesses

CWE-285Improper Authorization (opens in a new tab)

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 09:10:54 UTC

Weaknesses

References

Related threats