Weren’t you warned about reactivating the Print Spooler?

THREAT LEVEL: Red.

For a detailed advisory, download the pdf file here.

After almost 10 days of releasing an advisory by the Hive Pro Threat Research team, a new vulnerability has been found in Windows Print Spooler. This is a privilege escalation flaw that allows attackers to run arbitrary code with SYSTEM privileges, giving them the ability to install programs, read, alter, or remove data, and create new accounts with full user rights. The affected versions have not been known as of now. There have been no patches released yet, but workarounds are available.

Vulnerability Details

Patch Links

<https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-34481&gt;

References

<https://threatpost.com/microsoft-unpatched-bug-windows-print-spooler/167855/&gt;

<https://arstechnica.com/gadgets/2021/07/disable-the-windows-print-spooler-to-prevent-hacks-microsoft-tells-customers/&gt;