Back to the CVE list
CVE-2021-31166 CISA KEV · Actively exploited

Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability

CVSS score

—

EPSS probability

%99.9

Risk score

—

Published

4 y ago

OverviewPublic Exploits (12)NewsroomVulnerability Timeline

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

G
0vercl0k/CVE-2021-31166
GitHub

Proof of concept for CVE-2021-31166, a remote HTTP.sys use-after-free triggered remotely. (★814)

Public PoCSource updated: 21.05.2022 15:45:16
G
antx-code/CVE-2021-31166
GitHub

Windows HTTP协议栈远程代码执行漏洞 CVE-2021-31166 (★21)

Public PoCSource updated: 06.12.2022 01:51:40
G
corelight/CVE-2021-31166
GitHub

HTTP Protocol Stack CVE-2021-31166 (★15)

Public PoCSource updated: 24.10.2021 16:14:11
G
zha0gongz1/CVE-2021-31166
GitHub

PoC for CVE-2021-31166, a remote HTTP.sys use-after-free triggered remotely. Although it was defined as remote command execution, it can only cause the system to crash. (★9)

Public PoCSource updated: 07.05.2022 12:32:23
G
y0g3sh-99/CVE-2021-31166-Exploit
GitHub

Exploit for MS Http Protocol Stack RCE vulnerability (CVE-2021-31166) (★7)

Public PoCSource updated: 18.01.2022 22:29:37
G
mvlnetdev/CVE-2021-31166-detection-rules
GitHub

Different rules to detect if CVE-2021-31166 is being exploited (★4)

Public PoCSource updated: 26.02.2022 21:52:41
G
zecopro/CVE-2021-31166
GitHub

simple bash script for exploit CVE-2021-31166 (★4)

Public PoCSource updated: 11.05.2022 10:47:48
G
Udyz/CVE-2021-31166
GitHub

http.sys remote UAF to Leak Credential (★3)

Public PoCSource updated: 14.09.2021 06:22:31
G
mauricelambert/CVE-2021-31166
GitHub

CVE-2021-31166: exploitation with Powershell, Python, Ruby, NMAP and Metasploit. (★3)

Public PoCSource updated: 06.05.2022 04:14:53
G
imiko0u0/CVE-2021-31166-exploit
GitHub

Just a simple CVE-2021-31166 exploit tool (★1)

Public PoCSource updated: 20.10.2021 19:00:18
G
0xmaximus/Home-Demolisher
GitHub

PoC for CVE-2021-31166 and CVE-2022-21907 (★0)

Public PoCSource updated: 22.11.2022 18:11:12
G
qazbnme/CVE-2021
GitHub

Proof of concept for CVE-2021-31166, a remote HTTP.sys use-after-free triggered remotely. (★0)

Public PoCSource updated: 27.10.2025 23:37:50

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2021-31166"