"Microsoft is urging Windows users to immediately install an update after security researchers found a serious vulnerability in the operating system.

The security flaw, known as PrintNightmare, affects the Windows Print Spooler service. Researchers at cybersecurity company Sangfor accidentally published a how-to guide for exploiting it.

The firm accidentally leaked instructions on how the flaw could be exploited by hackers, exacerbating the need for Windows users to update their systems immediately.

The researchers tweeted in late May that they had found vulnerabilities in Print Spooler, which allows multiple users to access a printer.
They published a proof-of-concept online by mistake and subsequently deleted it - but not before it was published elsewhere online, including developer site GitHub.

Microsoft warned that hackers that exploit the vulnerability could install programs, view and delete data or even create new user accounts with full user rights.That gives hackers enough command and control of your PC to do some serious damage.

Windows 10 is not the only version affected - Windows 7, which Microsoft has ended support for last year, is also subject to the vulnerability.
Despite announcing that it would no longer issue updates for Windows 7, Microsoft issued a patch for its 12-year old operating system, underscoring the severity of the PrintNightmare flaw.

Has my Windows device been impacted?
Microsoft is urging all Windows users to install an update that affects the Windows Print Spooler service, which allows multiple users to access a printer. The company has already rolled out fixes for Windows 10, Windows 8, Windows 7 and some server versions.

Download your updates through the usual way or visit: https://support.microsoft.com/en-us/windows/update-windows-10-3c5ae7fc-9fb6-9af1-1984-b5e0412c556a"

https://7news.com.au/technology/microsofts-urgent-warning-to-all-users-to-install-update-after-windows-security-flaw-is-accidentally-outed-c-3378582

[EDIT] Various people suggested workarounds and such for both windows 7 and 10, since there are too many to mention i suggest reading the whole thread (it isn't big).

2 years ago*

Comment has been collapsed.

Not the first time Windows did things with printers. https://www.theregister.com/2021/03/11/printer_problems_windows_10/

2 years ago
Permalink

Comment has been collapsed.

screw windows :D i am so happy that i don't need to use that piece of shit :D

2 years ago
Permalink

Comment has been collapsed.

I just wish I could find a cheap gpu to install linux and do the passthrough thing 😭

2 years ago
Permalink

Comment has been collapsed.

Hi there fellow penguin 🐧

2 years ago
Permalink

Comment has been collapsed.

Thanks for the heads-up!

2 years ago
Permalink

Comment has been collapsed.

And if havent updated your win7 in a long time it wont be easy now.

2 years ago
Permalink

Comment has been collapsed.

Does it seem to me or does it sound suspicious?
I mean, Microsoft loves to control and spy on users. Could this be a way to install something in our dear Windows 7?

Researchers "accidentally" published a how-to guide... 🤔

2 years ago*
Permalink

Comment has been collapsed.

https://www.steamgifts.com/discussion/hbyXz/windows-11-home-wont-work-without-a-microsoft-account-and-will-they-nag-to-upgrade-like-710

And people saying Bill Gates tracking you with a corona vaccin/chip, what's one more thing? :p

2 years ago
Permalink

Comment has been collapsed.

No-no, no chips! I'm not one of those 😄

Well, I mean... Windows 11 is coming soon, where you will definitely need a Microsoft account. They say that it will not be possible to create a local account, as in Windows 7 and 10.

And Microsoft will need to somehow get people to switch to a new OS, right?

So this is what I thought - could there be something in these patches that would make it difficult to use the old OS (7 and 10), as there were news about Apple, remember, when they deliberately slowed down the work of old iPhones so that people would buy the newest models? =)

2 years ago
Permalink

Comment has been collapsed.

Then you must atleast access the internet for them to do something, with the lack of patches that might already be risky on it's own.

Hmm i dunno, there are already (CPU :p) chips (coffee lake+) that force you to use Windows 10, Intel is already helping them.
I got Windows 95/98 and XP in VMWare and they run absolutely fine (except the BSOD's). I really hated the transition too at first, but with Classic Shell, you really got a lot of Windows 7 back.

I don't think Microsoft doesn't care anymore about people that still use Windows 7, many will say 10 was done already and i believe even Microsoft said that, and there wasn't really a need anymore for another windows.
They got loads of money, if they cared about spying techniques they would first done something about the massive pirating of their products, all the antivirus programs always block keys, Microsoft? Barely.

2 years ago
Permalink

Comment has been collapsed.

"... I don't think Microsoft doesn't care anymore about people that still use Windows 7,..."

It isn't so much about consumers still using Win7 as large enterprises (I could at least name one).

2 years ago
Permalink

Comment has been collapsed.

"I'm not one of those"

continues to be one of those

;)

2 years ago
Permalink

Comment has been collapsed.

LoL

2 years ago
Permalink

Comment has been collapsed.

A temp workaround is to stop/disable the service:

net stop Spooler

obviously you won't be able to print stuff, including the print-to-pdf functionality.

2 years ago
Permalink

Comment has been collapsed.

That only turns off the service. It doesn't disable it or prevent something from turning it back on again.

2 years ago
Permalink

Comment has been collapsed.

yes, if you want to disable it:

sc config Spooler start= disabled

or using Powershell:

Set-Service -Name "Spooler" -Status stopped -StartupType disabled
2 years ago
Permalink

Comment has been collapsed.

The Microsoft patch does not totally fix the vulnerability.

You're better off installing a patch that fully fixes it (it's listed on the page I linked). Or if you don't trust or want to bother with setting that up, disabling the print spooler might be less trouble be until the vulnerability is fully patched by Microsoft. You would have to re-enable the print spooler temporarily if you want to print something of course.

A simpler way of disabling the print spooler than what's on the second page I linked:

  1. open Task Manager
  2. click the Services tab near the top
  3. click Open Services at the bottom of Task Manager
  4. on the Services window that pops up, scroll down to Print Spooler in the Name column
  5. right click Print Spooler, and choose Stop
  6. right click Print Spooler, and choose Properties
  7. where it says "Startup type:" change that to Disabled, and hit Okay

To enable it again do everything the same (you can skip step 5), but for the last step change "Startup type:" to Automatic
Then right click Print Spooler, and choose Start

2 years ago
Permalink

Comment has been collapsed.

Deleted

This comment was deleted 11 months ago.

2 years ago
Permalink

Comment has been collapsed.

Win 7 updates can be found here since apparently that article assumes the whole world is using 10

https://www.catalog.update.microsoft.com/Search.aspx?q=KB5004953

2 years ago
Permalink

Comment has been collapsed.

However, these updates can only be installed with the paid update license.
Or does the POS-ready trick still work?

2 years ago
Permalink

Comment has been collapsed.

I dunno, I have just disabled the service for now. I mostly posted the link for future reference.

2 years ago
Permalink

Comment has been collapsed.

Deleted

This comment was deleted 2 years ago.

2 years ago*
Permalink

Comment has been collapsed.

Thanks for the heads-up.

Here's some detailed information about specific versions and and links for corresponding patches:
https://support.eset.com/en/alert8081-protection-against-printnightmare-remote-code-exploit

Though, they are packed with unwanted features. For Win 7 users i suggest search "simplix" - latest version (21.7.7) contains KB5004953 with unwanted features removed.

2 years ago
Permalink

Comment has been collapsed.

Any idea where I would find a trustworthy source for that latest version you mentioned? Searching for "simplix" only takes me to 21.6.10 and including the version number only to Russian torrents and the like?

2 years ago
Permalink

Comment has been collapsed.

It's kind of risky to give direct link - both for users and source. It's not totally legal...
blog dot simplix dot info slash update7
magnet (torrent) link in upper corner. only torrent - don't download exe here - i'm not sure about it...
It is "russian torrent", but most updates don't involve language and\or multilanguage.

2 years ago
Permalink

Comment has been collapsed.

Thanks. I'm aware that community hacks like this one would somewhere in a grey area, legally. An older version seems to be on majorgeeks, though. I think I'll just wait on an update. There seems to be a version 2.7.14 already, but I'm not gonna install stuff where I can't even read the patch notes. Also, "most updates don't involve language" is not anywhere near good enough, when just one russian language patch (on an English edition) can really mess up a system real badly. I've disabled remote access to the spooler for now.

2 years ago
Permalink

Comment has been collapsed.

Just looked closely:

(Локализация)

The update kit interface has been translated into the following languages: *

Английский (English)
Армянский (Armenian)
Бразильский португальский (Brazilian Portuguese)
Индонезийский (Indonesian)
Испанский международный (Spanish International)
Китайский традиционный (Chinese Traditional)
Норвежский (Norwegian)
Русский (Russian)
Турецкий (Turkish)
Украинский (Ukrainian)
Чешский (Czech)
Эстонский (Estonian)
  • Only the program interface languages are indicated here, the updates themselves can be installed on a system with any language.

Also included the official localization of the Internet Explorer 11 interface into 95 languages, including spell checking and word hyphenation.

2 years ago
Permalink

Comment has been collapsed.

Thanks a lot.
There are workaround listed here in case you don't want to patch: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34527

2 years ago
Permalink

Comment has been collapsed.

Thanks for the heads-up Lugum
disabled the service for the moment, might install the patch later (although I don't use printing at all, so I'll just keep it turned off I guess)

2 years ago
Permalink

Comment has been collapsed.

been printing normal without problem or patch

2 years ago
Permalink

Comment has been collapsed.

Sign in through Steam to add a comment.