{"id":"CVE-2026-70153","published":"2026-10-13T19:19:28.537","lastModified":"2026-10-16T16:20:38.200","description":"Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-122"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70153","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based buffer overflow in Microsoft's PostScript Printer Driver allows remote attackers to execute arbitrary code on affected systems. This vulnerability is particularly dangerous because it can be exploited over the network without requiring authentication.","exploitability":"Exploitation is relatively straightforward as it requires no authentication and can be triggered remotely, though successful exploitation may depend on specific printer driver configurations or network conditions.","blast_radius":"The impact could be widespread across organizations with network-accessible print servers or workstations running the affected PostScript printer driver, potentially leading to full system compromise.","remediation":"Apply the Microsoft security update KB5042189 immediately, as it contains the fix for this vulnerability in the PostScript Printer Driver.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","printer","network"],"model":"garnet-coder","analyzedAt":"2026-10-14T08:48:30.540Z"}}