Windows 10 Printing spooler's vulnerabilities are distributed
The KB5004945 "KB5004945" was distributed to modify the vulnerabilities of Windows 10 print spoolers (common vulnerability identifiers: CVE-2021-34527), known as the name of "PrintnightMare".The target is Windows 10 2004 or later.To apply, it is necessary to install the KB5003173 released on May 11 first.
PrintnightMare is a vulnerability that can be executed remotely by the printing spooler service that is inappropriate files.System permissions may be able to execute any code, allowing users to view, change, delete data, or create users with full permissions.
This attack uses a print spooler RPCADDPRINTERDRIVEREX () function, and there was CVE-2021-1675 as a vulnerability using the function, which was corrected in June 2021.However, PrintnightMare has a different attack vector, so it cannot be corrected in the June patch, so this countermeasure is required.