The severity of the issue is critical as threat actors can use it to take over a Windows domain server to easily deploy malware across an organization’s network. PrintNightmare is a new 0-day vulnerability that exposes Windows servers to remote code execution attacks through a Windows Print Spooler vulnerability that was accidentally disclosed by Chinese researchers. The report has been color-coded to see at a glance which machines are up-to-date and which ones still need to be updated.PrintNightmare 0-day Exposes All Windows Domain Controllers To help manage your update progress, we've created the Patch Tuesday Audit Report that checks if the assets in your network are on the latest patch updates. Run the Patch Tuesday February 2022 Audit Report If you are using Microsoft Dynamics GP, best you schedule your update in the near future. The most severe of the four is a remote code execution vulnerability with a CVSS score of 8.3 that allows an authenticated user could send a specially-crafted SQL request to a Dynamics GP Web Service and perform remote code execution. Just like the Print Spooler, Microsoft Dynamics gets 4 fixes. Further, according to Microsoft's exploitability assessment, exploitation is less likely.

With a CVSS base score of 8.1 it ranks at the top this month but Microsoft lists that servers are only vulnerable if dynamic updates are enabled. The most severe Windows OS vulnerability of this month is CVE-2022-21984. Microsoft hasn't provided a lot of details, but these four fixes come only a few months after PrintNightmare caused a chain reaction which led to months of patches for the Print Spooler service. ⚡ TL DR | Go Straight to the February 2022 Patch Tuesday Audit Report Print Spooler Vulnerabilities ReturnĪmongst the non-critical patches this month are 4 Print Spooler vulnerability fixes.

The February 2022 edition of Patch Tuesday brings us 48 fixes, with 0 critical! We've listed the most important changes below.

Lansweeper printnightmare