KB5004238 & CVE-2021-34527

Question

Will only installing KB5004238 fix the Printnightmare vulnerability CVE-2021-34527 in windows server 2016 , or to be followed by KB5005010 installation ?

Thanks ,

Regards,

Swaminathan

Answer 1

The actual fix came with the July 7 out-of-band KB5004948 which is also a part of the cumulative update July 13 KB5004238. KB5005010 is an informational document only, nothing there to install.

--please don't forget to upvote and Accept as answer if the reply is helpful--

Answer 2

@Swaminathan Shanmugam
Hi,
Installing KB5004238 fix the Printnightmare vulnerability CVE-2021-34527 in windows server 2016.
The full listing of available update packages is in the Security Updates table in the CVE:
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34527

While KB5005010 is not an actual update file/installer. It is instructions to apply registry entries to further harden systems after applying the July 6th updates.
https://support.microsoft.com/en-us/topic/kb5005010-restricting-installation-of-new-printer-drivers-after-applying-the-july-6-2021-updates-31b91c02-05bc-4ada-a7ea-183b129578a7

Hope above information can help you.

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread

Answer 3

Hi Patrick & JennyFeng,

Thank you both for the prompt help in this regard ,

I am not be able to mark both answers as correct , Forum allows me to mark only one as correct answer but both of you provided the correct solution

Regards,

Swaminathan