Windows 打印后台处理程序服务 RCE CVE-2021-1675 (PrintNightmare)

如何禁用打印后台处理程序服务？

CMD 命令提示符

net start | findstr -i "spooler"

net stop spooler

REG ADD "HKLM\SYSTEM\CurrentControlSet\Services\Spooler" /v "Start " /t REG_DWORD /d "4" /f

PowerShell

Get-Service -Name Spooler

Stop-Service -Name Spooler -Force

Set-Service -Name Spooler -StartupType Disabled

服务控制

sc query Spooler

sc config Spooler start=disabled

参考

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34527

#CVE-2021-1675 #PrintNightmare #WindowsPrintSpoolerServiceRCE