CVE-2023-24884: high-severity vulnerability in Microsoft Windows 10 Version 1507
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
A flaw in Microsoft's printer drivers allows an attacker to execute malicious code on a computer by sending specially crafted print jobs. This affects PostScript and PCL6 printers and can compromise system security.
The vulnerability exists in the PostScript and PCL6 class printer drivers due to improper validation of print job data (CWE-681: Integer Overflow or Wraparound). An attacker can send a malicious print job through the network or local print queue to trigger memory corruption, leading to remote code execution with system privileges.
In the same product, most dangerous first.