{"id":"CVE-2026-108467","published":"2026-10-13T19:18:06.987","lastModified":"2026-10-16T16:17:02.767","description":"Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized attacker to execute code over a network.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-122"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108467","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based buffer overflow exists in Microsoft's PostScript Printer Driver that allows an authorized attacker to execute arbitrary code remotely. This vulnerability could enable attackers with valid credentials to gain full control over affected systems.","exploitability":"Exploitation requires an authenticated user with access to the printer driver service, which is moderately difficult but achievable through legitimate administrative access or credential compromise.","blast_radius":"If exploited, this vulnerability could allow attackers to execute code on any system running the affected PostScript Printer Driver, potentially leading to full system compromise and lateral movement across the network.","remediation":"Apply the Microsoft security update KB5041234 which fixes this heap-based buffer overflow in the PostScript Printer Driver.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","printer","windows"],"model":"garnet-coder","analyzedAt":"2026-10-17T08:55:19.949Z"}}