Only days after Microsoft issued a warning about an unpatched security hole in the Windows Print Spooler service, another potentially zero-day problem in the same component has been identified, making it the fourth printer-related flaw reported in recent weeks.
A security researcher disclosed an attack for the issue. By connecting to a rogue print server under their control, the vulnerability lets a threat actor to execute arbitrary code with SYSTEM rights on a susceptible Windows computer.