CVE-2026-70147

Summary

A heap-based buffer overflow in Microsoft's PostScript Printer Driver allows remote attackers to execute arbitrary code on affected systems. This critical vulnerability could enable attackers to gain full control of vulnerable machines without requiring authentication.

Exploitability

Exploitation is relatively straightforward as it requires only network access to the printer driver service, with no authentication needed for the initial exploit attempt.

Blast radius

The vulnerability affects all systems running the affected PostScript Printer Driver, potentially impacting thousands of devices across enterprise networks that have print services enabled.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Apply Microsoft's patch KB5049218 or upgrade to Windows 10 version 22H2 or later with the updated printer driver components.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.