There has been a security vulnerability in the Windows Print Spooler service that Microsoft has patched in a new security update. According to the report, the vulnerability "PrintNightmare" allows malicious code to be executed remotely and installed on systems with system privileges, amended existing programs, and created new accounts with full privileges. All major versions of Windows - from Windows 7 to Windows 10 - have received the emergency patch from Microsoft. Security updates have also been released for Windows Server users to fix the critical flaw.
Windows Server 2004 is one of the Windows server versions that has received security updates to address the PrintNightmare vulnerability, followed by all other windows versions. Microsoft said that the updates include protections against the CVE-2021-34527 issue.
Considering that Windows Print Spooler is available for all versions of Windows, this vulnerability affects all Windows systems. For now, security updates are only available for a limited number of versions. The rest of Microsoft's Windows versions will be updated soon, according to Microsoft.
Researchers at Chinese cybersecurity firm Sangfor Technologies reported the PrintNightmare flaw last week. In this case, malicious code can be executed remotely with system privileges. It is considered a remote code execution vulnerability. Microsoft explained that the issue arises when Windows Print Spooler improperly performs privileged file operations.
comment 0 Comments
more_vert