How many variants of the PrintNightmare existed?

Context: PrintNightmare was a critical security vulnerability affecting the Microsoft Windows operating system. The vulnerability occurred within the print spooler service. There were two variants, one permitting remote code execution, and the other leading to privilege escalation. A third vulnerability was announced July 15, 2021, and upgraded to remote code execution by Microsoft in August.

On July 6, 2021, Microsoft started releasing out-of-band patches attempting to address the vulnerability. Due to its severity, Microsoft released patches for Windows 7 and Windows Server 2012, despite being out of their mainstream support period. The patches resulted in some printers ceasing to function. Researchers have noted that the vulnerability has not been fully addressed by the patches. After the patch is applied, only administrators account on Windows print server, will be able to install printer drivers, as part of the vulnerability related to the ability of non-administrators to install printer drivers on the system, such as shared printers on system without sharing password protection.

The organization which discovered the vulnerability, Sangfor, published a proof of concept in a public GitHub repository. Apparently published in error, or as a result of a miscommunication between the researchers and Microsoft, the proof of concept was deleted shortly after. However, several copies have since appeared online.

Answer: There are two variants of the PrintNightmare, one permitting remote code execution and the other one leading to privilege escalation.