How to install the PrintNightmare security updates UpdatePromptSettings = 0 (DWORD) or not defined (default setting)Īdditional information and further guidance are available in the KB5005010 support document and the CVE-2021-34527 security advisory.NoWarningNoElevationOnInstall = 0 (DWORD) or not defined (default setting).HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\Printers\PointAndPrint.If the registry keys documented exist, in order to secure your system, you must confirm that the following registry keys are set to 0 (zero) or are not present:.If the registry keys documented do not exist, no further action is required.After applying the security update, review the registry settings documented in the CVE-2021-34527 advisory.The update will not change existing registry settings In ALL cases, apply the CVE-2021-34527 security update.These are the correct steps required to patch this critical Windows Print Spooler RCE vulnerability as shared by Microsoft: Microsoft has updated the PrintNightmare patch guidance and is now encouraging customers to update as soon as possible. "All reports we have investigated have relied on the changing of default registry setting related to Point and Print to an insecure configuration." Clarified PrintNightmare guidance "Our investigation has shown that the OOB security update is working as designed and is effective against the known printer spooling exploits and other public reports collectively being referred to as PrintNightmare," the Microsoft Security Response Center explains. This clarified guidance comes after security researchers tagged the patches as incomplete after finding that the OOB security updates could be bypassed in specific scenarios. Microsoft says the emergency security updates released at the start of the week correctly patch the PrintNightmare Print Spooler vulnerability for all supported Windows versions and urges users to start applying the updates as soon as possible.
0 kommentar(er)
