Windows Print Spooler Vulnerability Allows RCE, Domain Takeover

Technical details and a proof-of-concept (PoC) exploit have been accidentally leaked for a currently unpatched vulnerability that affects Windows Print Spooler and allows remote code execution. Despite the need for authentication, this vulnerability can be used by threat actors to take over a Windows domain server to easily deploy malware across a company’s network. The vulnerability is named PrintNightmare. Its technical details have been leaked because of the confusion with another vulnerability affecting Windows Print Spooler. Read more...