It's August 2021 Patch Tuesday! Yesterday, Microsoft released a new patch which changes the default behavior of Point and Print on Windows since the current implementation does not meet the security needs of its customers.

If you're testing Windows 10 version 21H2, you'll get KB5005033, bringing the build number to 19044.1165.

➤ SECURITY UPDATE GUIDE:
✓ https://msrc.microsoft.com/update-guide/

"Our investigation into several vulnerabilities collectively referred to as “PrintNightmare” has determined that the default behavior of Point and Print does not provide customers with the level of security required to protect against potential attacks.

Today, we are addressing this risk by changing the default Point and Print driver installation and update behavior to require administrator privileges. The installation of this update with default settings will mitigate the publicly documented vulnerabilities in the Windows Print Spooler service. This change will take effect with the installation of the security updates released on August 10, 2021 for all versions of Windows, and is documented as CVE-2021-34481."

It will now require admin privileges to install and update printer drivers because of PrintNightmare vulnerability. It may be a bit troublesome for enterprise scenarios where users run in Standard mode without access to admin privileges. For most individual Windows users, the change will only mean having to click on some prompts to gain elevated privileges in order to add or update printers, though. Now, an administrator will have to handle any changes to printer drivers.

Apart from that, Microsoft has released 44 security fixes, with seven of the vulnerabilities being rated critical. There were also three zero days included in the release and 37 were rated as important.

The affected tools included .NET Core & Visual Studio, ASP.NET Core & Visual Studio, Azure, Windows Update, Windows Print Spooler Components, Windows Media, Windows Defender, Remote Desktop Client, Microsoft Dynamics, Microsoft Edge (Chromium-based), Microsoft Office, Microsoft Office Word, Microsoft Office SharePoint and more.

The fixed zero day bugs include:
CVE-2021-36948 Windows Update Medic Service Elevation of Privilege Vulnerability
CVE-2021-36942 Windows LSA Spoofing Vulnerability
CVE-2021-36936 Windows Print Spooler Remote Code Execution Vulnerability

➤ MORE INFORMATION & RESOURCES:
✓ https://support.microsoft.com/en-us/topic/august-10-2021-kb5005031-os-build-18363-1734-8af726da-a39b-417d-a5fb-670c42d69e78
✓ https://www.onmsft.com/news/windows-will-require-admin-privileges-to-install-printer-drivers-because-of-printnightmare-and-other-patch-tuesday-news
✓ https://www.neowin.net/news/microsoft-releases-new-patch-for-printnightmare-recommends-immediate-installation/

#KB5005033 #Windows10 #21H2 #Windows1021H2 #Windows10version21H2 #Build19043​​​ #21H1​​​ #May2021Update #kb5005033 #Windows1021H1​​​ #windows10may2021update #windows1021h1​​​ #21h1​​​#may2021update​​​ #KB5005031 ​​​#PatchTuesday​​​​ #SecurityUpdates​​​​ #Windows10Update​​​​ #CumulativeUpdates #WindowsUpdate​​​​ #MicrosoftUpdates​​​​ #august2021patchtuesday​​​​​​​​ #MeetNow #windows10 #WindowsInsiders #Windows #Windows10

#Windows11 #KB5005188 #Windows #Microsoft #MicrosoftEvent #Windows11launch #windows11event #June24 #windows11upgrade #windows11features #win11 #UI #kb5005188 #21H2​​​​​​ #Build22000 #AreYouFlightingYet #Windows365 #CloudPC #Windows365Setup #Windows365Install #Windows365releasedate