Microsoft has released emergency out-of-band security updates to address the actively exploited PrintNightmare zero-day vulnerability in the Windows Print Spooler service and impacting all supported Windows versions. The remote code execution bug (tracked as CVE-2021-34527) allows attackers to take over affected servers via remote code execution (RCE) with SYSTEM privileges, as it will enable them to install programs, view, change, or delete data, and create new accounts with full user rights.

Read full article on Bleeping Computer