Windows Print priv esc

Windows has its share of printer-related issues. After one another, a number of CVEs attacking Windows machines employing the printer driver install feature emerged.

PrintNightmare (CVE-2021-1675 / CVE-2021-34527)

GitHub - calebstewart/CVE-2021-1675: Pure PowerShell implementation of CVE-2021-1675 Print Spooler Local Privilege Escalation (PrintNightmare)

Pure PowerShell implementation of CVE-2021-1675 Print Spooler Local Privilege Escalation (PrintNightmare) - GitHub - calebstewart/CVE-2021-1675: Pure PowerShell implementation of CVE-2021-1675 Prin...

GitHubcalebstewart

Point and print (CVE-2021-34481)

reg query "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint"

CVE-2021-36958

References

• https://www.bleepingcomputer.com/news/microsoft/microsoft-confirms-another-windows-print-spooler-zero-day-bug/
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1675
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34527
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-36958
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34481
• https://borncity.com/win/2021/09/22/windows-printnightmare-patch-stand-und-workarounds-22-sept-2021/
• https://tryhackme.com/room/printnightmarehpzqlp8