Cyber Risks · Cisco Talos

Print Nightmare: Here’s what you need to know and Talos’ coverage

Summary: Cisco Talos reported on PrintNightmare, a privilege escalation vulnerability in the Windows print spooler (CVE-2021-1675 / CVE-2021-34527) that could let authenticated users gain admin rights, affect domain controllers, and achieve remote code execution by loading signed and unsigned drivers. Microsoft patched it multiple times, including an out-of-band fix on July 6, 2021, but the patch was confirmed incomplete and bypassable on July 7, 2021.

What's compelling: A vulnerability that reaches domain controllers and survives repeated patching leaves enterprise networks exposed even after administrators apply every fix Microsoft has shipped.

Read the original at Cisco Talos ↗

Topics
Vulnerabilities & Patching
Mentions
CVE-2021-1675CVE-2021-34527CVE-2026-20127
Related