CVE-2023-35302
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk66th percentile - higher than 66% of all known CVEs
Summary
A vulnerability in the Microsoft PostScript and PCL6 printer driver allows for remote code execution. An attacker can exploit this flaw to gain control over the system where the vulnerable driver is installed.
Risk Assessment
Organizations may be exposed to remote attacks that could lead to data loss or system takeover. Specifically, an attacker could gain access to sensitive information.
Recommendation
It is recommended to update the printer drivers to the latest version to mitigate this vulnerability. Additionally, systems should be monitored for unauthorized activities.
Other vulnerabilities in Microsoft PostScript and PCL6 Class Printer Driver
See all- CVE-2023-35324Medium
A vulnerability in the Microsoft PostScript and PCL6 printer driver allows for information disclosure. An attacker can exploit this flaw to gain access to sensitive data.
- CVE-2023-35306Medium
A vulnerability in the Microsoft PostScript and PCL6 printer driver allows for information disclosure. An attacker could exploit this flaw to gain access to sensitive data.
- CVE-2023-35296Medium
A vulnerability in the Microsoft PostScript and PCL6 printer driver allows for information disclosure.
- CVE-2023-21801High
Remote code execution vulnerability in Microsoft PostScript and PCL6 Class Printer Driver. Could allow arbitrary code execution.
- CVE-2023-21693Medium
Information Disclosure vulnerability in Microsoft PostScript and PCL6 Class Printer Driver. Could allow unauthorized access to data.
- CVE-2023-21684High
Remote Code Execution vulnerability in Microsoft PostScript and PCL6 Class Printer Driver. An attacker could exploit this vulnerability to run arbitrary code on the target system.
Original NVD description (English source)
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability