Microsoft Issues Emergency Patch For PrintNightmare Flaw

Microsoft has issued a patch for a worrying “PrintNightmare” vulnerability, which can allow a hacker to remotely take over a Windows PC.

The critical flaw is found in the Windows Print Spooler service, and was discovered last week by researchers at China-based security specialist Sangfor, which accidentally published proof-of-concept (PoC) exploit code.

The flaw has been dubbed PrintNightmare, and Microsoft has issued out-of-band security updates to address the flaw.

Update immediately

The flaw has been rated as critical, as attackers can remotely execute code with system-level privileges on affected machines. Essentially, the hacker could take over, install programs, steal data, or create new accounts.

Indeed, so serious is the flaw that Microsoft has even issued a patch for Windows 7 users, despite the fact that that operating system officially went out of support last year.

The patch was issued on Tuesday and is available for download here.

The patch should be included automatically via the Windows Update.

“A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations,” said Redmond.

“An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges,” it added. “An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.”

Redmond said that it recommends that users install these updates immediately.

Tom Jowitt

Tom Jowitt is a leading British tech freelancer and long standing contributor to Silicon UK. He is also a bit of a Lord of the Rings nut...

Recent Posts

Tesla Reaches $1 Trillion Valuation

Car maker Tesla now worth at least double that of Toyota, Volkswagen and Ford combined,…

3 hours ago

Australia Funds Telstra Buy Of Digicel Pacific To Thwart China

Strategic blocking? Australian government joins forces with Telstra to acquire Digicel Pacific, after interest from…

4 hours ago

Apple ‘Very Likely’ To Face DoJ Antitrust Lawsuit – Report

Two year investigation by Department of Justice of tech giants has seen acceleration of Apple…

5 hours ago

France Holds Secret Talks With Israel Over NSO Spyware

Top adviser to French President holds talks with Israeli counterpart to discuss NSO spyware allegedly…

6 hours ago

Facebook Making Online Hate Worse, Whistleblower Tells MPs

Frances Haugen answered questions from the UK parliament's Joint Committee on Monday, after cache of…

8 hours ago

Silicon UK In Focus Podcast: Women In Tech

Today we are speaking to Joanne Thurlow, Head of IT for Siemens Energy, Industrial Application…

8 hours ago