{"id":"CVE-2026-70147","state":"PUBLISHED","title":"Microsoft PostScript Printer Driver Remote Code Execution Vulnerability","description":"Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.","publishedAt":"2026-10-13T19:00:25.344Z","updatedAt":"2026-10-30T19:07:37.621Z","severity":{"score":9.8,"label":"Critical","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","source":"microsoft"},"assigner":"microsoft","products":["Microsoft Windows 10 Version 1607","Microsoft Windows 10 Version 1809","Microsoft Windows 10 Version 21H2","Microsoft Windows 10 Version 22H2","Microsoft Windows 11 version 23H2","Microsoft Windows 11 Version 23H2","Microsoft Windows 11 Version 24H2","Microsoft Windows 11 Version 25H2","Microsoft Windows 11 version 26H1","Microsoft Windows 11 Version 26H2","Microsoft Windows Server 2012","Microsoft Windows Server 2012 (Server Core installation)","Microsoft Windows Server 2012 R2","Microsoft Windows Server 2012 R2 (Server Core installation)","Microsoft Windows Server 2016","Microsoft Windows Server 2016 (Server Core installation)","Microsoft Windows Server 2019","Microsoft Windows Server 2019 (Server Core installation)","Microsoft Windows Server 2022","Microsoft Windows Server 2025","Microsoft Windows Server 2025 (Server Core installation)"],"affected":[{"vendor":"Microsoft","product":"Windows 10 Version 1607","versions":[{"version":"10.0.14393.0","status":"affected","lessThan":"10.0.14393.9612","versionType":"custom"}],"platforms":["32-bit Systems","x64-based Systems"]},{"vendor":"Microsoft","product":"Windows 10 Version 1809","versions":[{"version":"10.0.17763.0","status":"affected","lessThan":"10.0.17763.9376","versionType":"custom"}],"platforms":["32-bit Systems","x64-based Systems"]},{"vendor":"Microsoft","product":"Windows 10 Version 21H2","versions":[{"version":"10.0.19044.0","status":"affected","lessThan":"10.0.19044.7807","versionType":"custom"}],"platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"]},{"vendor":"Microsoft","product":"Windows 10 Version 22H2","versions":[{"version":"10.0.19045.0","status":"affected","lessThan":"10.0.19045.7807","versionType":"custom"}],"platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"]},{"vendor":"Microsoft","product":"Windows 11 version 23H2","versions":[{"version":"10.0.22631.0","status":"affected","lessThan":"10.0.22631.7652","versionType":"custom"}],"platforms":["ARM64-based Systems"]},{"vendor":"Microsoft","product":"Windows 11 Version 23H2","versions":[{"version":"10.0.22631.0","status":"affected","lessThan":"10.0.22631.7652","versionType":"custom"}],"platforms":["x64-based Systems"]},{"vendor":"Microsoft","product":"Windows 11 Version 24H2","versions":[{"version":"10.0.26100.0","status":"affected","lessThan":"10.0.26100.9711","versionType":"custom"}],"platforms":["ARM64-based Systems","x64-based Systems"]},{"vendor":"Microsoft","product":"Windows 11 Version 25H2","versions":[{"version":"10.0.26200.0","status":"affected","lessThan":"10.0.26200.9711","versionType":"custom"}],"platforms":["ARM64-based Systems","x64-based Systems"]},{"vendor":"Microsoft","product":"Windows 11 version 26H1","versions":[{"version":"10.0.28000.0","status":"affected","lessThan":"10.0.28000.3231","versionType":"custom"}],"platforms":["ARM64-based Systems","x64-based Systems"]},{"vendor":"Microsoft","product":"Windows 11 Version 26H2","versions":[{"version":"10.0.26300.0","status":"affected","lessThan":"10.0.26300.9711","versionType":"custom"}],"platforms":["ARM64-based Systems","x64-based Systems"]},{"vendor":"Microsoft","product":"Windows Server 2012","versions":[{"version":"6.2.9200.0","status":"affected","lessThan":"6.2.9200.26434","versionType":"custom"}],"platforms":["x64-based Systems"]},{"vendor":"Microsoft","product":"Windows Server 2012 (Server Core installation)","versions":[{"version":"6.2.9200.0","status":"affected","lessThan":"6.2.9200.26434","versionType":"custom"}],"platforms":["x64-based Systems"]},{"vendor":"Microsoft","product":"Windows Server 2012 R2","versions":[{"version":"6.3.9600.0","status":"affected","lessThan":"6.3.9600.23470","versionType":"custom"}],"platforms":["x64-based Systems"]},{"vendor":"Microsoft","product":"Windows Server 2012 R2 (Server Core installation)","versions":[{"version":"6.3.9600.0","status":"affected","lessThan":"6.3.9600.23470","versionType":"custom"}],"platforms":["x64-based Systems"]},{"vendor":"Microsoft","product":"Windows Server 2016","versions":[{"version":"10.0.14393.0","status":"affected","lessThan":"10.0.14393.9612","versionType":"custom"}],"platforms":["x64-based Systems"]},{"vendor":"Microsoft","product":"Windows Server 2016 (Server Core installation)","versions":[{"version":"10.0.14393.0","status":"affected","lessThan":"10.0.14393.9612","versionType":"custom"}],"platforms":["x64-based Systems"]},{"vendor":"Microsoft","product":"Windows Server 2019","versions":[{"version":"10.0.17763.0","status":"affected","lessThan":"10.0.17763.9376","versionType":"custom"}],"platforms":["x64-based Systems"]},{"vendor":"Microsoft","product":"Windows Server 2019 (Server Core installation)","versions":[{"version":"10.0.17763.0","status":"affected","lessThan":"10.0.17763.9376","versionType":"custom"}],"platforms":["x64-based Systems"]},{"vendor":"Microsoft","product":"Windows Server 2022","versions":[{"version":"10.0.20348.0","status":"affected","lessThan":"10.0.20348.5761","versionType":"custom"}],"platforms":["x64-based Systems"]},{"vendor":"Microsoft","product":"Windows Server 2025","versions":[{"version":"10.0.26100.0","status":"affected","lessThan":"10.0.26100.33650","versionType":"custom"}],"platforms":["x64-based Systems"]},{"vendor":"Microsoft","product":"Windows Server 2025 (Server Core installation)","versions":[{"version":"10.0.26100.0","status":"affected","lessThan":"10.0.26100.33650","versionType":"custom"}],"platforms":["x64-based Systems"]}],"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70147"],"weaknesses":["CWE-122"],"ingestedAt":"2026-10-30T19:22:04.361Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/70xxx/CVE-2026-70147.json","commit":"a3048093a4809ba3e15db7a610bbd66f60b789d3","baselineCommit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-70147","state":"PUBLISHED","datePublished":"2026-10-13T19:00:25.344Z","dateUpdated":"2026-10-30T19:07:37.621Z","assignerShortName":"microsoft","assignerOrgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","dateReserved":"2026-08-03T23:31:50.776Z"},"containers":{"cna":{"title":"Microsoft PostScript Printer Driver Remote Code Execution Vulnerability","descriptions":[{"lang":"en-US","value":"Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network."}],"affected":[{"vendor":"Microsoft","product":"Windows 10 Version 1607","versions":[{"version":"10.0.14393.0","status":"affected","lessThan":"10.0.14393.9612","versionType":"custom"}],"platforms":["32-bit Systems","x64-based Systems"]},{"vendor":"Microsoft","product":"Windows 10 Version 1809","versions":[{"version":"10.0.17763.0","status":"affected","lessThan":"10.0.17763.9376","versionType":"custom"}],"platforms":["32-bit Systems","x64-based Systems"]},{"vendor":"Microsoft","product":"Windows 10 Version 21H2","versions":[{"version":"10.0.19044.0","status":"affected","lessThan":"10.0.19044.7807","versionType":"custom"}],"platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"]},{"vendor":"Microsoft","product":"Windows 10 Version 22H2","versions":[{"version":"10.0.19045.0","status":"affected","lessThan":"10.0.19045.7807","versionType":"custom"}],"platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"]},{"vendor":"Microsoft","product":"Windows 11 version 23H2","versions":[{"version":"10.0.22631.0","status":"affected","lessThan":"10.0.22631.7652","versionType":"custom"}],"platforms":["ARM64-based Systems"]},{"vendor":"Microsoft","product":"Windows 11 Version 23H2","versions":[{"version":"10.0.22631.0","status":"affected","lessThan":"10.0.22631.7652","versionType":"custom"}],"platforms":["x64-based Systems"]},{"vendor":"Microsoft","product":"Windows 11 Version 24H2","versions":[{"version":"10.0.26100.0","status":"affected","lessThan":"10.0.26100.9711","versionType":"custom"}],"platforms":["ARM64-based Systems","x64-based Systems"]},{"vendor":"Microsoft","product":"Windows 11 Version 25H2","versions":[{"version":"10.0.26200.0","status":"affected","lessThan":"10.0.26200.9711","versionType":"custom"}],"platforms":["ARM64-based Systems","x64-based Systems"]},{"vendor":"Microsoft","product":"Windows 11 version 26H1","versions":[{"version":"10.0.28000.0","status":"affected","lessThan":"10.0.28000.3231","versionType":"custom"}],"platforms":["ARM64-based Systems","x64-based Systems"]},{"vendor":"Microsoft","product":"Windows 11 Version 26H2","versions":[{"version":"10.0.26300.0","status":"affected","lessThan":"10.0.26300.9711","versionType":"custom"}],"platforms":["ARM64-based Systems","x64-based Systems"]},{"vendor":"Microsoft","product":"Windows Server 2012","versions":[{"version":"6.2.9200.0","status":"affected","lessThan":"6.2.9200.26434","versionType":"custom"}],"platforms":["x64-based Systems"]},{"vendor":"Microsoft","product":"Windows Server 2012 (Server Core installation)","versions":[{"version":"6.2.9200.0","status":"affected","lessThan":"6.2.9200.26434","versionType":"custom"}],"platforms":["x64-based Systems"]},{"vendor":"Microsoft","product":"Windows Server 2012 R2","versions":[{"version":"6.3.9600.0","status":"affected","lessThan":"6.3.9600.23470","versionType":"custom"}],"platforms":["x64-based Systems"]},{"vendor":"Microsoft","product":"Windows Server 2012 R2 (Server Core installation)","versions":[{"version":"6.3.9600.0","status":"affected","lessThan":"6.3.9600.23470","versionType":"custom"}],"platforms":["x64-based Systems"]},{"vendor":"Microsoft","product":"Windows Server 2016","versions":[{"version":"10.0.14393.0","status":"affected","lessThan":"10.0.14393.9612","versionType":"custom"}],"platforms":["x64-based Systems"]},{"vendor":"Microsoft","product":"Windows Server 2016 (Server Core installation)","versions":[{"version":"10.0.14393.0","status":"affected","lessThan":"10.0.14393.9612","versionType":"custom"}],"platforms":["x64-based Systems"]},{"vendor":"Microsoft","product":"Windows Server 2019","versions":[{"version":"10.0.17763.0","status":"affected","lessThan":"10.0.17763.9376","versionType":"custom"}],"platforms":["x64-based Systems"]},{"vendor":"Microsoft","product":"Windows Server 2019 (Server Core installation)","versions":[{"version":"10.0.17763.0","status":"affected","lessThan":"10.0.17763.9376","versionType":"custom"}],"platforms":["x64-based Systems"]},{"vendor":"Microsoft","product":"Windows Server 2022","versions":[{"version":"10.0.20348.0","status":"affected","lessThan":"10.0.20348.5761","versionType":"custom"}],"platforms":["x64-based Systems"]},{"vendor":"Microsoft","product":"Windows Server 2025","versions":[{"version":"10.0.26100.0","status":"affected","lessThan":"10.0.26100.33650","versionType":"custom"}],"platforms":["x64-based Systems"]},{"vendor":"Microsoft","product":"Windows Server 2025 (Server Core installation)","versions":[{"version":"10.0.26100.0","status":"affected","lessThan":"10.0.26100.33650","versionType":"custom"}],"platforms":["x64-based Systems"]}],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70147","name":"Microsoft PostScript Printer Driver Remote Code Execution Vulnerability","tags":["vendor-advisory","patch"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en-US","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","baseSeverity":"CRITICAL","baseScore":9.8,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-122","description":"CWE-122: Heap-based Buffer Overflow","lang":"en-US","type":"CWE"}]}],"providerMetadata":{"shortName":"microsoft","orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","dateUpdated":"2026-10-30T19:07:37.621Z"},"datePublic":"2026-10-13T14:00:00.000Z","cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*","versionStartIncluding":"10.0.26100.0","versionEndExcluding":"10.0.26100.9711"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*","versionStartIncluding":"10.0.26200.0","versionEndExcluding":"10.0.26200.9711"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.26300.0","versionEndExcluding":"10.0.26300.9711"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.26100.0","versionEndExcluding":"10.0.26100.33650"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.26100.0","versionEndExcluding":"10.0.26100.33650"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*","versionStartIncluding":"6.2.9200.0","versionEndExcluding":"6.2.9200.26434"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:x64:*","versionStartIncluding":"6.2.9200.0","versionEndExcluding":"6.2.9200.26434"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*","versionStartIncluding":"6.3.9600.0","versionEndExcluding":"6.3.9600.23470"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2012_R2:*:*:*:*:*:*:x64:*","versionStartIncluding":"6.3.9600.0","versionEndExcluding":"6.3.9600.23470"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*","versionStartIncluding":"10.0.14393.0","versionEndExcluding":"10.0.14393.9612"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.14393.0","versionEndExcluding":"10.0.14393.9612"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.14393.0","versionEndExcluding":"10.0.14393.9612"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*","versionStartIncluding":"10.0.17763.0","versionEndExcluding":"10.0.17763.9376"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.17763.0","versionEndExcluding":"10.0.17763.9376"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.17763.0","versionEndExcluding":"10.0.17763.9376"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10_21H2:*:*:*:*:*:*:x86:*","versionStartIncluding":"10.0.19044.0","versionEndExcluding":"10.0.19044.7807"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_10_22H2:*:*:*:*:*:*:x86:*","versionStartIncluding":"10.0.19045.0","versionEndExcluding":"10.0.19045.7807"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*","versionStartIncluding":"10.0.20348.0","versionEndExcluding":"10.0.20348.5761"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:arm64:*","versionStartIncluding":"10.0.22631.0","versionEndExcluding":"10.0.22631.7652"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_11_23H2:*:*:*:*:*:*:x64:*","versionStartIncluding":"10.0.22631.0","versionEndExcluding":"10.0.22631.7652"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:arm64:*","versionStartIncluding":"10.0.28000.0","versionEndExcluding":"10.0.28000.3231"}]}]}]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-10-08T00:00:00+00:00","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3","id":"CVE-2026-70147"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-10-14T03:57:08.643Z"}}]}}}