Microsoft finally fixes PrintNightmare vulnerability

To help address the ongoing problems with the so-called PrintNightmare vulnerability (CVE-2021-34527), Microsoft has announced a change to the default behavior of the Point and Print feature in Windows. The change means that in order to install printer drivers, users will have to have administrative privileges. This mitigates against the Windows Print Spooler vulnerability that allowed any user to install drivers via Point and Print, a fact that could be exploited to install a malicious drivers to allow for remote code execution and SYSTEM privileges. See also: ASUS BIOS update gives motherboards TPM 2.0 support ready for Windows 11 Microsoft… [Continue Reading]