Print Nightmare: Here’s what you need to know and Talos’ coverage
Summary: Cisco Talos reported on PrintNightmare, a privilege escalation vulnerability in the Windows print spooler (CVE-2021-1675 / CVE-2021-34527) that could let authenticated users gain admin rights, affect domain controllers, and achieve remote code execution by loading signed and unsigned drivers. Microsoft patched it multiple times, including an out-of-band fix on July 6, 2021, but the patch was confirmed incomplete and bypassable on July 7, 2021.
What's compelling: A vulnerability that reaches domain controllers and survives repeated patching leaves enterprise networks exposed even after administrators apply every fix Microsoft has shipped.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2021-1675CVE-2021-34527CVE-2026-20127
- Related
- Threat Brief: Windows Print Spooler RCE Vulnerability (CVE-2021-34527 AKA Print Nightmare) Cyber Risks ·Threat Source newsletter (Aug. 19, 2021) Cyber Risks ·