Stack-based buffer overflow in the Microsoft PostScript Printer Driver lets an unauthorized user gain higher privileges on a local machine. The flaw is a classic stack overflow that can overwrite return addresses or critical variables, enabling execution of arbitrary code as the system account. This is a typical CWE-121 exploitation scenario with direct impact on confidentiality, integrity, and availability if compromised.

The vulnerability affects the PostScript Printer Driver on multiple Microsoft Windows environments, including Windows 10 versions 1607, 1809, 21H2, and 22H2; Windows 11 versions 23H2, 24H2, 25H2, 26H2, and 26H1; and Windows Server editions 2012, 2012 R2, 2016, 2019, 2022, and 2025. All variants with the driver installed are susceptible.

The CVSS score of 7.8 signals a high severity local privilege escalation. EPSS is not available, but the vulnerability is not currently listed in the CISA KEV catalog. The likely attack vector requires local access; an attacker would need to execute malicious code on the machine to trigger the overflow, so remote exploitation appears unlikely based on the description. Once the overflow is triggered, the attacker could elevate to SYSTEM level and compromise the host.