{"id":322934,"date":"2021-08-12T16:15:40","date_gmt":"2021-08-12T13:15:40","guid":{"rendered":"https:\/\/en.buradabiliyorum.com\/the-windows-10-printnightmare-nightmare-isnt-over\/"},"modified":"2021-08-12T16:15:40","modified_gmt":"2021-08-12T13:15:40","slug":"the-windows-10-printnightmare-nightmare-isnt-over","status":"publish","type":"post","link":"https:\/\/buradabiliyorum.com\/en\/the-windows-10-printnightmare-nightmare-isnt-over\/","title":{"rendered":"#The Windows 10 PrintNightmare Nightmare Isn\u2019t Over"},"content":{"rendered":"<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_89 counter-hierarchy ez-toc-counter ez-toc-custom ez-toc-container-direction\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Table of Contents<\/p>\n<label for=\"ez-toc-cssicon-toggle-item-6aefc9c841fca\" class=\"ez-toc-cssicon-toggle-label\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #dd3333;color:#dd3333\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #dd3333;color:#dd3333\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/label><input type=\"checkbox\"  id=\"ez-toc-cssicon-toggle-item-6aefc9c841fca\" checked aria-label=\"Toggle\" \/><nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/buradabiliyorum.com\/en\/the-windows-10-printnightmare-nightmare-isnt-over\/#_New_PrintNightmare_Vulnerability\" >\u00a0New PrintNightmare Vulnerability<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/buradabiliyorum.com\/en\/the-windows-10-printnightmare-nightmare-isnt-over\/#How_Can_You_Protect_Yourself\" >How Can You Protect Yourself?<\/a><\/li><\/ul><\/nav><\/div>\n<p><strong>&#8220;#The Windows 10 PrintNightmare Nightmare Isn\u2019t Over&#8221;<\/strong><\/p>\n<div>\n<figure style=\"width: 1200px\" class=\"wp-caption alignnone\"><img loading=\"lazy\" decoding=\"async\" class=\"type:primaryImage size-full wp-image-747705\" srcset=\"https:\/\/www.howtogeek.com\/wp-content\/uploads\/2021\/08\/hacker-with-laptop.jpg?width=398&amp;trim=1,1&amp;bg-color=000&amp;pad=1,1 400w, https:\/\/www.howtogeek.com\/wp-content\/uploads\/2021\/08\/hacker-with-laptop.jpg?width=1198&amp;trim=1,1&amp;bg-color=000&amp;pad=1,1 1200w\" sizes=\"auto, 400w, 1200w\" src=\"https:\/\/www.howtogeek.com\/wp-content\/uploads\/2021\/08\/hacker-with-laptop.jpg?width=1198&amp;trim=1,1&amp;bg-color=000&amp;pad=1,1\" alt=\"Hacker with a laptop\" width=\"1200\" height=\"675\" onload=\"pagespeed.lazyLoadImages.loadIfVisibleAndMaybeBeacon(this);\" onerror=\"this.onerror=null;pagespeed.lazyLoadImages.loadIfVisibleAndMaybeBeacon(this);\"\/><figcaption class=\"wp-caption-text\"><span class=\"type:primaryImage imagecredit\"><a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/www.shutterstock.com\/image-photo\/male-hacker-652144957\">ViChizh\/Shutterstock.com<\/a><\/span><\/figcaption><\/figure>\n<p>It <a href=\"https:\/\/buradabiliyorum.com\/en\/category\/download-scripts-themes-apps\/\" data-internallinksmanager029f6b8e52c=\"9\" title=\"Download Scripts &amp; Themes &amp; Apps\" target=\"_blank\" rel=\"noopener\">app<\/a>eared the PrintNightmare situation was solved on Patch Tuesday when Microsoft released a change that was supposed to solve the issue. However, it seems that PrintNightmare is anything but over.<\/p>\n<h2 role=\"heading\" aria-level=\"2\"><span class=\"ez-toc-section\" id=\"_New_PrintNightmare_Vulnerability\"><\/span>\u00a0New PrintNightmare Vulnerability<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>The new zero-day print spooler vulnerability has been discovered. It\u2019s being tracked as\u00a0CVE-2021-36958, and it appears to allow hackers to gain\u00a0SYSTEM access privileges on a Windows PC.<\/p>\n<p>Like previous exploits, this one\u00a0attacks settings for the Windows print spooler, Windows print drivers, and Windows Point and Print.<\/p>\n<p>The exploit was first spotted by\u00a0<a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/twitter.com\/gentilkiwi\">Benjamin Delpy<\/a> (via <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/www.bleepingcomputer.com\/news\/microsoft\/microsoft-confirms-another-windows-print-spooler-zero-day-bug\/\">Bleeping Computer<\/a>), and it allows threat actors to get SYSTEM access by connecting to a remote print server. Microsoft <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/click.linksynergy.com\/deeplink?id=2QzUaswX1as&amp;mid=24542&amp;u1=htg\/747703&amp;murl=https%3A%2F%2Fmsrc.microsoft.com%2Fupdate-guide%2Fvulnerability%2FCVE-2021-36958\">later confirmed<\/a> the issues, saying, \u201cA remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations.\u201d<\/p>\n<p>As far as what someone can do if they exploit this vulnerability, Microsoft says, \u201cAn attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.\u201d<\/p>\n<h2 role=\"heading\" aria-level=\"2\"><span class=\"ez-toc-section\" id=\"How_Can_You_Protect_Yourself\"><\/span>How Can You Protect Yourself?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Unfortunately, we\u2019ll have to wait until Microsoft issues a patch to fix this new vulnerability. In the meantime, you can disable the Print Spooler or only\u00a0allow your device to install printers from authorized servers.<\/p>\n<p>To enable the latter, you\u2019ll need to go to edit the group policy on your PC. To do so, launch\u00a0gpedit.msc, then click \u201cUser Configuration.\u201d Next, click on \u201cAdministrative Templates,\u201d followed by \u201cControl Panel.\u201d Finally, go to \u201cPrinters\u201d and click \u201cPackage Point and Print \u2014 Approved Servers.\u201d<\/p>\n<p>Once you get to the\u00a0Package Point and Print \u2014 Approved Servers, enter the list of servers you wish to allow to use as a print server or make one up, and then press OK to enable the policy. It\u2019s not a perfect solution, but it\u2019ll help protect you unless the threat actor can take over an authorized print server with malicious drivers.<\/p>\n<\/div>\n<p><script async src=\"\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p><script>\n setTimeout(function(){\n  !function(f,b,e,v,n,t,s)\n  {if(f.fbq)return;n=f.fbq=function(){n.callMethod?\n  n.callMethod.apply(n,arguments):n.queue.push(arguments)};\n  if(!f._fbq)f._fbq=n;n.push=n;n.loaded=!0;n.version='2.0';\n  n.queue=[];t=b.createElement(e);t.async=!0;\n  t.src=v;s=b.getElementsByTagName(e)[0];\n  s.parentNode.insertBefore(t,s) } (window, document,'script',\n  'https:\/\/connect.facebook.net\/en_US\/fbevents.js');\n   fbq('init', '335401813750447');\n   fbq('track', 'PageView');\n  },3000);\n<\/script><\/p>\n<blockquote><p><strong><span style=\"color: #ff6600;\">If you liked the article, do not forget to share it with your friends. Follow us on\u00a0<span style=\"color: #ff0000;\"><a style=\"color: #ff0000;\" href=\"https:\/\/news.google.com\/publications\/CAAqBwgKMLG0nwswvr63Aw\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">Google News<\/a><\/span>\u00a0too, click on the star and choose us from your favorites.<\/span><\/strong><\/p><\/blockquote>\n<blockquote>\n<p style=\"text-align: center;\">For forums sites go to <span style=\"color: #ff9900;\"><a style=\"color: #ff9900;\" href=\"https:\/\/forum.buradabiliyorum.com\/\" target=\"_blank\" rel=\"noopener\">Forum.BuradaBiliyorum.Com<\/a><\/span><\/strong><\/p>\n<\/blockquote>\n<blockquote>\n<p style=\"text-align: center;\"><strong>If you want to read more like this article, you can visit our <span style=\"color: #ff9900;\"><a style=\"color: #ff9900;\" href=\"https:\/\/en.buradabiliyorum.com\/technology\/\" target=\"_blank\" rel=\"noopener\">Technology category.<\/a><\/span><\/strong><\/p>\n<\/blockquote>\n<p><span style=\"color: black;\"><a style=\"color: #ff9900;\" href=\"https:\/\/www.howtogeek.com\/747703\/the-windows-10-printnightmare-nightmare-isnt-done\/\" target=\"_blank\" rel=\"noopener\">Source<\/a><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>&#8220;#The Windows 10 PrintNightmare Nightmare Isn\u2019t Over&#8221; ViChizh\/Shutterstock.com It appeared the PrintNightmare situation was solved on Patch Tuesday when Microsoft released a change that was supposed to solve the issue. However, it seems that PrintNightmare is anything but over. \u00a0New PrintNightmare Vulnerability The new zero-day print spooler vulnerability has been discovered. It\u2019s being tracked as\u00a0CVE-2021-36958,&#8230;<\/p>\n","protected":false},"author":1,"featured_media":322935,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/www.howtogeek.com\/wp-content\/uploads\/2021\/08\/hacker-with-laptop.jpg?height=200p&trim=2,2,2,2","fifu_image_alt":"","footnotes":""},"categories":[18],"tags":[],"class_list":["post-322934","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technology"],"_links":{"self":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts\/322934","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/comments?post=322934"}],"version-history":[{"count":0,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts\/322934\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/media\/322935"}],"wp:attachment":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/media?parent=322934"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/categories?post=322934"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/tags?post=322934"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}