Security News > 2021 > August > Microsoft fixes Print Spooler bugs with August Patch Tuesday rollout

The fix means that only administrators will be able to install print drivers on Windows PCs. Microsoft has finally patched the last in a series of security vulnerabilities in its Windows Print Spooler service that could have allowed attackers to remotely control an affected system and install malicious programs or create new accounts.
On Tuesday, the company pushed out its August Patch Tuesday lineup, which included a fix for the Print Spooler Remote Code Execution Vulnerability to address this specific issue.
This isn't the first time Microsoft has tried to squash persistent bugs related to the Windows Print Spooler service.
Though the latest patch hopefully fixes these Print Spooler vulnerabilities for good, there is one major downside.
"The TLDR is that Microsoft was finally tired of bugs like CVE-2021-3448 and moved to only allow administrators to install print drivers," Jerry Gamblin, Kenna Security director of security research, told TechRepublic.
Beyond the Print Spooler fixes, the updates in this month's Patch Tuesday address 51 different vulnerabilities, which Gamblin referred to as a "Quiet" month.
News URL
Related news
- What Is Patch Tuesday? Microsoft’s Monthly Update Explained (source)
- Microsoft January 2025 Patch Tuesday fixes 8 zero-days, 159 flaws (source)
- Microsoft February 2025 Patch Tuesday fixes 4 zero-days, 55 flaws (source)
- February's Patch Tuesday sees Microsoft offer just 63 fixes (source)
- Microsoft’s Patch Tuesday Fixes 63 Flaws, Including Two Under Active Exploitation (source)
- Patch Tuesday: Microsoft Patches Two Actively Exploited Zero-Day Flaws (source)
- January 2025 Patch Tuesday forecast: Changes coming in cybersecurity guidance (source)
- Week in review: Exploited Ivanti Connect Secure zero-day, Patch Tuesday forecast (source)
- Patch Tuesday: January 2025 Security Update Patches Exploited Elevation of Privilege Attacks (source)
- Windows Patch Tuesday hits snag with Citrix software, workarounds published (source)
Related Vulnerability
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2021-04-08 | CVE-2021-3448 | A flaw was found in dnsmasq in versions before 2.85. | 4.0 |