This vulnerability, if exploited, could allow a remote attacker to gain access to a computer and alter data

Called "PrintNightmare," the exploit takes advantage of a security vulnerability found within the Windows Print Spooler service, which helps PCs manage the flow of print jobs sent to printers and print servers

While Print Spooler is the source of this issue, the potential impact goes beyond printing [According to Microsoft, which announced a mitigation for "PrintNightmare" yesterday (July 1), an attacker could use this vulnerability to gain system-level access to remotely install programs on a PC, change or delete data, or create a new account with full user rights They can create new accounts Such techniques could be used, for example, in ransomware attacks

Microsoft's exploit confirmation page lists a wide range of Windows versions, including the current Windows 10 as well as Windows 7, Windows 81, and various versions of Windows Server The company states that the vulnerability is already being actively exploited

Microsoft has not yet patched this exploit, but recommends installing the latest security update from June and disabling the print spooler service or disabling inbound remote printing through Windows Group Policy Infrastructure The company recommends that users disable the print spooler service or disable inbound remote printing through Windows Group Policy Infrastructure Microsoft has not yet assessed the severity of this exploit, but the potential impact of this attack is indeed serious

According to ITNews, news of this exploit was premature Hong Kong-based security group Sangfor Technologies, which plans to discuss the Windows Print Spooler zero-day exploit in detail at the upcoming Black Hat USA conference, has posted a proof-of-concept exploit online at The proof-of-concept exploit was published online The exploit was still valid, but the code had already been copied

In many cases, security companies share discovered exploits with software manufacturers so that they can apply patches before the details are released to the public In this case, however, it is possible that the proof of concept for the exploit was released prematurely or that there was a miscommunication between the group and Microsoft

This is not the first time the Windows Print Spooler has been exploited with disastrous results; the Stuxnet worm, discovered in 2010, similarly exploited a vulnerability in this service and spread worldwide after wreaking havoc on Iran's nuclear facilities