Microsoft Releases Out-of-Band Patch for PrintNightmare (CVE-2021-34527)

On July 6, Microsoft updated its advisory for CVE-2021-34527, a critical remote code execution vulnerability in Windows Print Spooler. Dubbed “PrintNightmare,” this advisory was updated to highlight the availability of patches. The advisory was originally published to address some confusion surrounding the availability of proof-of-concept (PoC) exploit code for a similar vulnerability, CVE-2021-1675. As a result, Microsoft also assigned it a new CVE identifier, CVE-2021-34527.

Despite the availability of patches, researchers have found that the vulnerability can still be exploited under certain configurations.

For more information about the vulnerability, including the availability of patches and Tenable product coverage, please visit our blog.