{"id":"CVE-2026-70147","published":"2026-10-13T19:19:27.683","lastModified":"2026-10-16T16:20:37.360","description":"Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-122"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70147","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based buffer overflow in Microsoft's PostScript Printer Driver allows remote attackers to execute arbitrary code on affected systems. This critical vulnerability could enable attackers to gain full control of vulnerable machines without requiring authentication.","exploitability":"Exploitation is relatively straightforward as it requires only network access to the printer driver service, with no authentication needed for the initial exploit attempt.","blast_radius":"The vulnerability affects all systems running the affected PostScript Printer Driver, potentially impacting thousands of devices across enterprise networks that have print services enabled.","remediation":"Apply Microsoft's patch KB5049218 or upgrade to Windows 10 version 22H2 or later with the updated printer driver components.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","printer","network","privilege-escalation"],"model":"garnet-coder","analyzedAt":"2026-10-14T08:48:25.048Z"}}