ctrlINT What the industry said about every indicator, with the quote

CVE-2021-34527Vulnerability

Microsoft Windows Print Spooler Remote Code Execution Vulnerability

Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .

Reported by 3 independent sources · first reported by Huntress · last reported

Last reported 8 months ago

CISA KEVAdded 3 Nov 2021
Fix due 3 May 2022
Used by ransomware: knownCISA KEV catalogue
EPSS99.8%
higher than 99% of CVEsFIRST EPSS, as of 8 Oct 2026

What the reports say

3 reports, newest first · the exact sentence from each

  1. “To gain a foothold on the CastelBlack server, you exploit PrintNightmare (CVE-2021-34527).”

    Elastic Security LabsVendor
    Automating GOAD and Live Malware Labs

  2. “A screenshot of the attackers’ workstation with an opened article about PrintNightmare (CVE-2021-34527).”

    Group-IBVendor
    ShadowSilk: A Cross-Border Binary Union for Data Exfiltration

  3. “On June 29, Huntress was made aware of CVE-2021-1675 (now termed CVE-2021-34527), a critical remote code execution and local privilege escalation vulnerability dubbed “PrintNightmare.””

    HuntressVendor
    Critical Vuln.: PrintNightmare Exposes Windows Servers to RCE

Indicators reported together

named in the same reports
Copy this indicator · defanged

Also named with it: CVE-2024-3094

Thanks — we review every report.

Report a wrong value
What is wrong with CVE-2021-34527 here?
No account needed. We do not store your IP address.