Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Microsoft

githubexploit · 2020-08-12

Description

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Microsoft. CVE-2020-1337 (Windows Print Spooler Elevation of Privilege

Affected software

Microsoft Windows 10 All versions

Microsoft Windows 7= SP1

Microsoft Windows 8.1 All versions

Microsoft Windows Rt 8.1 All versions

All known vulnerabilities by product

Windows Windows Print Spooler

CVSS 7.8 for CVE-2020-1337

7.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector:LOCAL

Attack Complexity:LOW

Privileges Required:LOW

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

100%confidence this exploit runs

Based on 5 file(s) in the source

EPSS Score

14.2%higher than 96.1% of all CVEs

Updated 2026-06-16

Exploit Details

Modified:2025-08-21 16:06

Last Seen:2025-08-31 20:44

Reporter:sailay1996

Written in:PowerShell

Last commit:2020-08-13

Tags

toctou race conditionmicrosoftCVE-2020-1337windows print spoolerelevation of privilegeexploittime-of-checktime-of-usepocprintdemon404death

Other exploits for CVE-2020-1337

Microsoft Spooler Local Privilege Elevation Exploit

2021-01-18 metasploitZDTRuby

Microsoft Spooler Local Privilege Elevation

2021-01-18 bwatters-r7PACKETSTORMRuby

Microsoft Windows Local Spooler Bypass Vulnerability

2020-11-12 James ForshawZDT

Microsoft Windows Local Spooler Bypass

2020-11-11 James ForshawPACKETSTORM

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Microsoft

2020-08-11 VoidSecGITHUB

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Microsoft

2020-08-11 neofitoGITHUB

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Microsoft

2020-07-21 math1asGITHUB

Microsoft Spooler Local Privilege Elevation Vulnerability

2019-11-04 Peleg Hadar, Tomer Bar, 404death, sailay1996, bwatters-r7METASPLOITRuby

Exploit Code

README16 lines

## https://sploitus.com/exploit?id=06A7A41E-B35F-55CE-9DCA-60DC3C5B9D27
# cve-2020-1337-poc
poc for CVE-2020-1337 (Windows Print Spooler Elevation of Privilege)

![test1](https://github.com/sailay1996/cve-2020-1337-poc/blob/master/poc.jpg)

##### Credit to all researcher who find out this bug.

#### Ref:
https://voidsec.com/cve-2020-1337-printdemon-is-dead-long-live-printdemon/

#### code browsed from: 
https://github.com/sailay1996/WerTrigger  
https://github.com/BC-SECURITY/Invoke-PrintDemon 

[@404death](https://twitter.com/404death)