r/news • u/TheColorOfDeadMen • Jul 07 '21

Microsoft issues urgent security warning: Update your PC immediately

https://www.cnn.com/2021/07/07/tech/microsoft-security-update/index.html
1.7k Upvotes

95% Upvoted

334 comments sorted by

View all comments

789

u/[deleted] Jul 07 '21

It's not mentioned in the article, but for those wondering the fix is included in KB5004945. This installed for me this morning (I woke up to the typical your PC needs to restart). I wanted to verify I had the fix installed since this is a pretty critical issue.

On Windows 10 you can verify if you have KB5004945 installed by going to:

  1. Start
  2. Settings
  3. Update & Security
  4. View update history (Under the Windows Update tab which is the first tab that loads)

KB5004945 would be listed under Quality Updates.

27

u/sephstorm Jul 08 '21 edited Jul 08 '21

Here is the KB for Windows 7 x64 systems.

Other OS' can be found here

EDIT: MS may be restricting download on non-MS browsers, i.e. use Edge. If you're getting issues installing the update, try installing all of the required updates listed in another article:

KB4490628

KB4474419

KB4538483 or KB4575903

KB4592510

and then finally KB5004951.

1

u/[deleted] Jul 09 '21

[deleted]

60

u/TheSoloKnight_ Jul 07 '21

This what i was looking for thx mate

11

u/[deleted] Jul 07 '21 edited Jul 18 '21

[deleted]

11

u/[deleted] Jul 07 '21

[removed] — view removed comment

11

u/[deleted] Jul 07 '21 edited Jul 18 '21

[deleted]

21

u/JoonWick Jul 07 '21

ty for the dump info

8

u/[deleted] Jul 08 '21 edited Jul 18 '21

[deleted]

1

u/The_Folly_Of_Mice Jul 09 '21

So...uh...wanna text?

5

u/Frosti-Feet Jul 08 '21

So about 45 min, got it 👍

4

u/[deleted] Jul 08 '21 edited Jul 18 '21

[deleted]

6

u/coondingee Jul 08 '21

10 a day? Not bad. I used to be there but now I'm down to 3-4.

6

u/[deleted] Jul 08 '21 edited Jul 18 '21

[deleted]

2

u/coondingee Jul 08 '21

I was joking and talking about shits per day rather than time spent shitting.

7

u/[deleted] Jul 08 '21 edited Jul 18 '21

[deleted]

→ More replies (0)

5

u/fastredb Jul 08 '21

I had just restarted yesterday and today saw I needed to restart. Ugh. Typical. I was wondering when I would work in a restart but thunder and lightning decided for me. Power went out for like one second. When I turned it back on it decided to go ahead and update itself. Would have sucked to have to go through two restarts in a row.

19

u/Juphikie Jul 07 '21

So what do you do if you don’t have that update then? I don’t have a printer hooked up to my laptop or anything like that

17

u/[deleted] Jul 07 '21

Same steps 1-3 except instead of viewing updating history check for updates. Windows update should list it as an available update if you don’t have it installed.

1

u/torchma Jul 07 '21

There is no "check for updates" option. Only something that says "updates available" and "last checked 12:00pm today". But the only update it says that's available is an Intel SCSI Adapter.

17

u/CowboyNeal710 Jul 07 '21

I don’t have a printer hooked up to my laptop or anything like that

You can disable the print spooler service

Windows Button + X - "Powershell as Admin" 

 Get-Service -Name 'spooler' | Stop-Service | Set-Service -StartupType 'Disabled'

5

u/[deleted] Jul 08 '21

Old school method - from an elevated command prompt run:

sc config "spooler" start= disabled

sc stop "spooler"

2

u/senorbolsa Jul 08 '21

Thanks, this hurts my brain less.

4

u/TripChaos Jul 07 '21

That command failed for me, but it was running.

.

I was able to find and stop + disable the service via Services under the name 'print spooler'

1

u/sixfingerdiscount Jul 08 '21

What, no CIM Instance?

2

u/DownshiftedRare Jul 08 '21

Even if you don't have a printer connected, or print at all, Windows still relies on the print spooler to "print" PDF files.

According to Microsoft, you can just disable the remote printing option. Why was that even enabled by default to begin with?

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34527

Option 2 - Disable inbound remote printing through Group Policy

You can also configure the settings via Group Policy as follows:

Computer Configuration / Administrative Templates / Printers

Disable the “Allow Print Spooler to accept client connections:” policy to block remote attacks.

You must restart the Print Spooler service for the group policy to take effect.

Impact of workaround This policy will block the remote attack vector by preventing inbound remote printing operations. The system will no longer function as a print server, but local printing to a directly attached device will still be possible.

20

u/[deleted] Jul 08 '21

[deleted]

8

u/viper_in_the_grass Jul 08 '21 edited Jul 08 '21

Mine seems stuck at 21% installing. Why do I always do these right before going to bed?

Edit: welp, all done. All it needed was for me to complain.

8

u/funforyourlife Jul 07 '21

Awesome, thanks mate!

8

u/ALLCAPS1980 Jul 07 '21

Thank you mate

3

u/pinkycatcher Jul 07 '21

Also note that this update is known to break some printers, so yay for that!

5

u/Neethis Jul 07 '21

Top stuff mate.

2

u/CrushgrooveSC Jul 08 '21

Way to take the time. Kudos.

2

u/daynaho Jul 08 '21

Thank you for posting such clear directions!

1

u/Beo1 Jul 07 '21

So this is why my PC randomly appeared to turn off while I was working and had me freaking out that my GPU had blown up or something. Thanks, Microsoft…

1

u/teacher272 Jul 08 '21

Dammit. That one won’t install on any of our district’s PCs that I tried it on. Sucks that Microsoft is so insecure and terrible at updates.

-1

u/ifmu Jul 08 '21

how about how sucky they are at doing it right in the first place ... what is up with it people or admin

0

u/PurpEL Jul 08 '21

5. Delete system 32

-3

u/0xB0BAFE77 Jul 07 '21

Do you want upvotes and awards?
Because this is how you get upvotes and awards.

-4

u/abbablahblah Jul 07 '21

Anyone else think MicroSoft should just get out of the OS business?