CVE-2023-24887

Deeper analysis

CVE-2023-24887 is a remote code execution vulnerability in the Microsoft PostScript and PCL6 Class Printer Driver. It received a CVSS v3.1 score of 8.8 and is associated with CWE-191. The flaw was published on 11 April 2023 and permits an attacker to execute arbitrary code on affected Windows systems that use these printer drivers.

An authenticated attacker with low privileges can exploit the issue over a network with low attack complexity and no user interaction required. Successful exploitation grants full control over confidentiality, integrity, and availability on the target system, enabling complete compromise of the affected host.

Microsoft publishes mitigation and patch information for this vulnerability in its Security Response Center update guide at the referenced URL. The current EPSS score of 0.1177, with a peak of 0.1196, reflects moderate exploitation probability without evidence of a sharp post-disclosure rise.