Microsoft PostScript Printer Driver Remote Code Execution Vulnerability

Description

Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.

Affected Products

Vendor	Product	Versions
microsoft	windows 10 version	10.0.14393.0, 10.0.17763.0, 10.0.19044.0, 10.0.19045.0, 10.0.22631.0, 10.0.22631.0, 10.0.26100.0, 10.0.26200.0, 10.0.28000.0, 10.0.26300.0, 6.2.9200.0, 6.2.9200.0, 6.3.9600.0, 6.3.9600.0, 10.0.14393.0, 10.0.14393.0, 10.0.17763.0, 10.0.17763.0, 10.0.20348.0, 10.0.26100.0, 10.0.26100.0

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70147(vendor-advisory, patch)

Related News (3 articles)

Tier C

VulDB2h ago

CVE-2026-70147 | Microsoft Windows up to Server 2025 PostScript Printer Driver heap-based overflow

→ No new info (linked only)

Tier C

Cisco Talos2h ago

Microsoft Patch Tuesday for October 2026 — Snort rules and prominent vulnerabilities

→ No new info (linked only)

Tier A

Microsoft MSRC9h ago

CVE-2026-70147 Microsoft PostScript Printer Driver Remote Code Execution Vulnerability

→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.19.8 CRITICAL

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CISA KEV❌ No

Actively exploited❌ No

Patch available

10.0.14393.961210.0.17763.937610.0.19044.780710.0.22631.765210.0.26100.971110.0.26200.971110.0.28000.323110.0.26300.97116.2.9200.264346.3.9600.2347010.0.20348.576110.0.26100.33650

CWECWE-122

PublishedOct 13, 2026

Trending Score60

Source articles3

Independent3

Info Completeness0/14

Missing: cve_id, title, description, vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack