CVE-2023-24925

Deeper analysis

Microsoft PostScript and PCL6 Class Printer Driver contains a remote code execution vulnerability tracked as CVE-2023-24925 and assigned CWE-416. The flaw affects the Windows printer driver components that process PostScript and PCL6 print jobs and carries a CVSS 3.1 score of 8.8 reflecting network attack vector, low attack complexity, and low privileges required.

An authenticated attacker with the ability to submit print jobs over the network can trigger the vulnerability to execute arbitrary code in the context of the driver, resulting in full confidentiality, integrity, and availability impact on the affected system. No user interaction is required once the attacker has low-privileged access to the print subsystem.

Microsoft’s advisory at msrc.microsoft.com directs administrators to apply the security updates released on April 11, 2023, which remediate the issue in supported versions of Windows. The update guide also recommends restricting printer driver installation privileges and limiting network exposure of print services where feasible.

The associated EPSS score has remained stable near 0.11 with no material increase after disclosure.