PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-70110 Microsoft CVE debrief

A stack-based buffer overflow in the Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally. Multiple Windows versions and server releases are affected, including Windows 10, Windows 11, and Windows Server 2012 through 2025. Microsoft has released patches for this vulnerability. The vulnerability affects various Windows and Windows Server systems, allowing attackers to potentially elevate privileges. This issue has been addressed by Microsoft through patches, which should be applied immediately, especially on systems exposed to local attacks. The CVE Program and NVD provide official records of this vulnerability, confirming its existence.

Vendor
Microsoft
Product
Windows 10 Version 1607
CVSS
HIGH 7.8
CISA KEV
Not listed in stored evidence
Original CVE published
2026-10-13
Original CVE updated
2026-10-13
Advisory published
2026-10-13
Advisory updated
2026-10-13

Who should care

Defenders and administrators of Windows and Windows Server systems should assess exposure and apply patches. Prioritization should focus on systems more likely to be targeted or that, if compromised, could lead to significant impact.

Why it matters

CVE-2026-70110 is a high-severity elevation of privilege vulnerability in the Microsoft PostScript Printer Driver. Defenders should prioritize patching affected systems, especially those exposed to local attacks, to prevent potential system compromise.

  • Local attackers could elevate privileges, potentially leading to system compromise
  • Successful exploitation requires local access and user interaction
  • Patching is feasible and recommended to mitigate this vulnerability
  • Verification of patch application is necessary to ensure protection

Technical summary

The Microsoft PostScript Printer Driver has a stack-based buffer overflow vulnerability that allows an unauthorized attacker to elevate privileges locally. This issue affects multiple versions of Windows 10, Windows 11, and Windows Server releases from 2012 to 2025. Microsoft has released patches to address this vulnerability.

Defensive priority

Apply patches immediately for affected Windows and Windows Server systems, especially those exposed to local attacks.

Recommended defensive actions

  • Apply patches from Microsoft for affected Windows and Windows Server systems
  • Prioritize patching for systems exposed to local attacks
  • Verify and apply patches for Windows 10, Windows 11, and Windows Server versions listed in the advisory

Evidence notes

The CVE Program and NVD provide official records of this vulnerability. Microsoft's advisory confirms the issue and provides patches. The vulnerability has been identified in multiple Windows and Windows Server versions, and patches have been released to address it. Defenders should verify patch application to ensure protection. The official CVE record and NVD detail page offer additional information on the vulnerability.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-70110 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-70110

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-70110 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-70110

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.