GHSA-3mj9-c62w-jw5w

Exploit Intelligence

• PoC for CVE-2021-31166 and CVE-2022-21907 (github-poc-repo)
• PoC for CVE-2021-31166 and CVE-2022-21907 (github-poc-repo)
• HTTP Protocol Stack CVE-2021-31166 (github-poc-repo)
• HTTP Protocol Stack CVE-2021-31166 (github-poc-repo)
• Proof of concept for CVE-2021-31166, a remote HTTP.sys use-after-free triggered remotely. (github-poc-repo)
• Proof of concept for CVE-2021-31166, a remote HTTP.sys use-after-free triggered remotely. (github-poc-repo)
• PoC for CVE-2021-31166 and CVE-2022-21907 (github-poc)
• PoC for CVE-2021-31166 and CVE-2022-21907 (github-poc)
• Just a simple CVE-2021-31166 exploit tool (github-poc)
• Just a simple CVE-2021-31166 exploit tool (github-poc)

…and 40 more exploits

Timeline

• CVE Published
• Sep 23, 2021 PoC Published
• Dec 11, 2023 PoC Published
• Mar 1, 2024 PoC Published
• Feb 25, 2025 PoC Published
• Sep 30, 2025 PoC Published
• Nov 29, 2025 PoC Published
• Nov 30, 2025 PoC Published
• Dec 3, 2025 PoC Published
• Dec 27, 2025 PoC Published
• Feb 4, 2026 PoC Published
• Apr 9, 2026 Security Advisory