<keyword id="10387" type="CITY" weightage="20" keywordseo="Microsoft">Microsoft</keyword> has released an emergency <keyword id="6354717" type="DEFINITION" weightage="20" keywordseo="Windows">Windows</keyword> patch to fix a critical vulnerability in the Windows <keyword id="11585747" type="UNKNOWN" weightage="20" keywordseo="print-spooler">Print Spooler</keyword> service called <keyword id="11585307" type="UNKNOWN" weightage="20" keywordseo="printnightmare">PrintNightmare</keyword> that was released last week. An attacker who successfully exploited this vulnerability could run arbitrary code with System privileges. An attacker could then install programmes, view, change, or delete data, or create new accounts with full user rights. Microsoft said on Tuesday that it has completed the investigation and has released security updates to address this vulnerability. "We recommend that you install these updates immediately. Note that the security updates released on and after July 6, 2021 contain protections for CVE-2021-1675 and the additional remote code execution exploit in the Windows Print Spooler service known as "PrintNightmare," the company said in an update. Microsoft last week warned Windows users of an unpatched critical vulnerability that can help hackers install malicious programmes and access key data on their systems. The US national cyber agency also admitted that the attacker can exploit 'PrintNightmare' to take control of an affected system. The Print Spooler service runs by default on Windows, including on client versions of the <keyword id="60472" type="ORGANIZATION" weightage="20" keywordseo="OS">OS</keyword>, <keyword id="11585746" type="UNKNOWN" weightage="20" keywordseo="domain-controllers">Domain Controllers</keyword>, and many Windows Server instances. Vulnerabilities in the Windows Print Spooler service have been a headache for system administrators for years. This time, Microsoft has issued patches for Windows Server 2019, Windows Server 2012 R2, Windows Server 2008, Windows 8.1, Windows RT 8.1, a variety of supported versions of <keyword id="6423476" type="UNKNOWN" weightage="20" keywordseo="windows-10">Windows 10</keyword>, and even security patches for Windows 7 that is now out of support. SEE ALSO - <a href="https://www.businessinsider.in/stock-market/news/clean-science-and-technology-ipo-maximum-broking-house-recommending-this-ipo/articleshow/84193873.cms" data-type="tilCustomLink">Clean Science and Technology, an Indian supplier to Bayer, has opened its IPO ⁠— and ‘subscribe’ is the unanimous call from analysts</a> <a href="https://www.businessinsider.in/tech/news/a-small-hospital-assam-is-using-ai-to-detect-strokes-in-tea-planters/articleshow/84194042.cms" data-type="tilCustomLink">A small hospital in a remote corner of Assam is using AI to detect strokes in tea planters</a>

Microsoft releases emergency patch for Windows 10, 8 and 7 to fix 'PrintNightmare' vulnerability

<ul class="summary-list"><li><keyword id="10387" type="CITY" weightage="60" keywordseo="Microsoft">Microsoft</keyword> told users to install an emergency update that addresses a critical security flaw. </li><li>The vulnerability affects all <keyword id="6354717" type="DEFINITION" weightage="60" keywordseo="Windows">Windows</keyword> systems and could let attackers steal, alter, or view data. </li><li>"We recommend that you install these updates immediately," the <keyword id="6358815" type="UNKNOWN" weightage="60" keywordseo="tech">tech</keyword> giant said in a security update.</li></ul>Microsoft on Wednesday told users to immediately install an <a href="https://support.microsoft.com/en-us/topic/july-6-2021-kb5004945-os-builds-19041-1083-19042-1083-and-19043-1083-out-of-band-44b34928-0a71-4473-aa22-ecf3b83eed0e">emergency Windows update</a> after it identified a security flaw in the operating system. The vulnerability, called PrintNightmare, allows attackers to infiltrate users' systems through the Print Spooler service, which enables multiple users to access a printer. Attackers could exploit the flaw relatively easily to install programs; view, edit, or delete data; or create new user accounts, Microsoft <a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34527">said Tuesday.</a>The security issue affects all supported versions of Windows, and Microsoft has labeled the emergency update as critical. <blockquote class="twitter-tweet blockquote" data-lang="en" data-cards="" data-conversation="">-Windows Update (@WindowsUpdate) <a href="https://twitter.com/mims/statuses/1412541283160137728?ref_src=twsrc%5Etfw">July 6, 2021</a></blockquote>"We recommend that you install these updates immediately," the tech giant said.Microsoft on July 1 said it was aware of the vulnerability and was investigating it. The fix comes amid a new wave of large-scale cyber attacks.Microsoft's own systems were breached - along with those of software juggernauts Intel and Cisco - during the massive <a href="https://www.businessinsider.com/solarwinds-hack-explained-government-agencies-cyber-security-2020-12">SolarWinds hack</a>, discovered in late 2020. Colonial Pipeline, which operates a critical US fuel pipeline, paid out nearly $5 million in bitcoin to hacker group DarkSide after a devastating <a href="https://www.businessinsider.com/colonial-pipeline-ransomware-cisa-gas-crisis-agencies-hackers-2021-5">ransomware attack</a> in May.

Microsoft warns users to update their computers immediately over security flaw

<keyword id="10387" type="COMPANY" weightage="20" keywordseo="Microsoft">Microsoft</keyword> has fixed 112 bugs across its range of products, including patching a <keyword id="6354717" type="DEFINITION" weightage="20" keywordseo="Windows">Windows</keyword> zero-day vulnerability that was exploited in the wild. The security updates, 24 for code execution (RCE) bugs, were part of Microsoft's November 2020 <keyword id="1824856" type="PERSON" weightage="20" keywordseo="Patch-Tuesday">Patch Tuesday</keyword>. Systems running the Windows 10 Anniversary Update were shielded from two exploits even before Microsoft had issued patches for them, its researchers have found. The zero-day bug was disclosed on October 30 by the Google <keyword id="494459" type="COMPANY" weightage="20" keywordseo="Project-Zero">Project Zero</keyword> and TAG security teams. A team of Google security researchers revealed a zero-day vulnerability in the <keyword id="163742" type="COMPANY" weightage="20" keywordseo="Microsoft-Windows">Microsoft Windows</keyword> operating system that is under active exploitation. The zero-day bug in the Windows kernel can be exploited to elevate an attacker's code with additional permissions. The vulnerability impacts all Windows versions between Windows 7 and the most recent Windows 10. Google discovered the zero-day around mid-October and gave Microsoft seven days to release a patch, reports ZDNet. Microsoft has also fixed 24 bugs that can allow remote code execution (RCE) attacks in apps such as Excel, Microsoft Sharepoint, <keyword id="8406683" type="UNKNOWN" weightage="20" keywordseo="Microsoft-Exchange-Server">Microsoft Exchange Server</keyword>, the Windows Network File System, the Windows GDI+ component, the Windows printing spooler service, and even in Microsoft Teams.

You Searched For "print spooler" and got 3 results

Microsoft releases emergency patch for Windows 10, 8 and 7 to fix 'PrintNightmare' vulnerability

IANS

Microsoft warns users to update their computers immediately over security flaw

Tim Levin

Microsoft fixes 112 security vulnerabilities in latest Patch Tuesday update

IANS