Critical security advisoryCriticalFlagged by our vulnerability database: PHP2Shell is on CISA’s exploited list. Most WordPress hosting runs PHP. See if your site is affectedFlagged by our vulnerability database: PHP2Shell is being exploited. DetailsExploited: PHP2Shell. Check your site
HuttenlocherTechnologies
Updated 12 h ago

Vulnerability database

Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.

1,766exploited flaws on CISA’s list
36added in the last 30 days
512new WordPress flaws this week
391,181entries in the database

109 results · page 1 of 3

  • Oct 13, 2026Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.CVE-2026-70153 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comCritical 9.8

    Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.

    Product
    Windows 10 Version 1607
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 13, 2026Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.CVE-2026-70147 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comCritical 9.8

    Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.

    Product
    Windows 10 Version 1607
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 13, 2026Stack-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.CVE-2026-70110 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8

    Stack-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.

    Product
    Windows 10 Version 1607
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 13, 2026Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.CVE-2026-70109 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8

    Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.

    Product
    Windows 10 Version 1607
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 13, 2026Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.CVE-2026-70092 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8

    Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.

    Product
    Windows 10 Version 1607
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 13, 2026Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized attacker to execute code over a network.CVE-2026-108467 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8

    Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized attacker to execute code over a network.

    Product
    Windows 10 Version 1607
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 12, 2026ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a code injection vulnerability in the MVG decoder when a PostScript renderer is used.CVE-2026-109275 · Other software · ImageMagick · reported by VulnCheckMedium 6.3

    ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a code injection vulnerability in the MVG decoder when a PostScript renderer is used. Attackers can supply a crafted MVG file that, when decoded, injects code into the PostScript rendering path.

    Product
    ImageMagick
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 12, 2026ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an information disclosure vulnerability in the PostScript decoder, which allocates a buffer one byCVE-2026-109273 · Other software · ImageMagick · reported by VulnCheckMedium 6.9

    ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an information disclosure vulnerability in the PostScript decoder, which allocates a buffer one byte longer than the data it decoded. Attackers can supply a crafted PostScript file to expose a single uninitialized byte of memory contents.

    Product
    ImageMagick
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 12, 2026ImageMagick 7.1.1-31 before 7.1.2-32 contains a NULL pointer dereference in the PostScript decoder that is triggered when a policy limit is reached.CVE-2026-109272 · Other software · ImageMagick · reported by VulnCheckMedium 6.3

    ImageMagick 7.1.1-31 before 7.1.2-32 contains a NULL pointer dereference in the PostScript decoder that is triggered when a policy limit is reached. Attackers can supply a crafted PostScript file for processing to crash the application, causing a denial of service.

    Product
    ImageMagick
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 29, 2026Ghostscript for Windows is vulnerable to local privilege escalation through PostScript resource file hijacking.CVE-2026-19547 · Other software · Artifex Software Inc. · reported by cvd@cert.plHigh 7

    Ghostscript for Windows is vulnerable to local privilege escalation through PostScript resource file hijacking. Due to the application searching for PostScript resource files in predictable paths under C:\\gs\\ that do not exist by default on Windows installations, combined with Windows default ACLs allowing any authenticated user to create directories at the root of C:\\, an attacker who is an authenticated local user can create the expected directory structure and plant a malicious PostScript file. When any user or service subsequently runs Ghostscript, the planted file is automatically loaded and executed with the full privileges of the Ghostscript process. This results in full compromise of Ghostscript process context, as well as running arbitrary code on the machine with Ghostscript process privileges. This issue was fixed in version 10.08.0.

    Product
    Ghostscript
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 17, 2026WordPress is vulnerable to a remote code execution vulnerability via malicious Postscript file upload by an Author level user or higher.CVE-2026-65640 · WordPress plugins & themes · reported by support@hackerone.comHigh 8.8

    WordPress is vulnerable to a remote code execution vulnerability via malicious Postscript file upload by an Author level user or higher. Prerequisites: * Imagick and Ghostscript in use on the server * A malicious user with the `upload_files` capability This issue affects all versions of WordPress. Version 7.0.4 has been released, containing a fix for the vulnerability, and as a courtesy to users on older branches the fix has been backported to all branches back to 4.7.

    What to do
    Update the plugin to the newest version.
  • Feb 3, 2026An out-of-bounds read vulnerability has been identified in the Postscript interpreter in various Lexmark devices.CVE-2025-65081 · Other software · Lexmark · reported by 7bc73191-a2b6-4c63-9918-753964601853Medium 6.9

    An out-of-bounds read vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user.

    Product
    MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ,
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 3, 2026A type confusion vulnerability has been identified in the Postscript interpreter in various Lexmark devices.CVE-2025-65080 · Other software · Lexmark · reported by 7bc73191-a2b6-4c63-9918-753964601853Medium 6.9

    A type confusion vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user.

    Product
    MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ,
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 3, 2026A heap-based buffer overflow vulnerability has been identified in the Postscript interpreter in various Lexmark devices.CVE-2025-65079 · Other software · Lexmark · reported by 7bc73191-a2b6-4c63-9918-753964601853Medium 6.9

    A heap-based buffer overflow vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user.

    Product
    MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ,
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 20, 2025Out-of-bounds array write in Xpdf 4.05 and earlier, due to incorrect integer overflow checking in the PostScript function interpreter code.CVE-2025-2574 · Other software · Xpdf · reported by xpdf@xpdfreader.comLow 2.1

    Out-of-bounds array write in Xpdf 4.05 and earlier, due to incorrect integer overflow checking in the PostScript function interpreter code.

    Product
    Xpdf
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 13, 2025A heap-based memory vulnerability has been identified in the Postscript interpreter in various Lexmark devices.CVE-2024-11345 · Other software · Lexmark International · reported by 7bc73191-a2b6-4c63-9918-753964601853High 7.3

    A heap-based memory vulnerability has been identified in the Postscript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code.

    Product
    CX, XC, CS, MS, MX, XM, et. al.
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 13, 2025A type confusion vulnerability has been identified in the Postscript interpreter in various Lexmark devices.CVE-2024-11344 · Other software · Lexmark · reported by 7bc73191-a2b6-4c63-9918-753964601853High 7.3

    A type confusion vulnerability has been identified in the Postscript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code.

    Product
    CX, XC, CS, MS, MX, XM, et. al.
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 27, 2024A memory corruption vulnerability has been identified in PostScript interpreter in various Lexmark devices.CVE-2023-50736 · Other software · Lexmark · reported by 7bc73191-a2b6-4c63-9918-753964601853Critical 9

    A memory corruption vulnerability has been identified in PostScript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code.

    Product
    various
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 27, 2024A heap corruption vulnerability has been identified in PostScript interpreter in various Lexmark devices.CVE-2023-50735 · Other software · Lexmark · reported by 7bc73191-a2b6-4c63-9918-753964601853Critical 9

    A heap corruption vulnerability has been identified in PostScript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code.

    Product
    various
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 27, 2024A buffer overflow vulnerability has been identified in PostScript interpreter in various Lexmark devices.CVE-2023-50734 · Other software · Lexmark · reported by 7bc73191-a2b6-4c63-9918-753964601853Critical 9

    A buffer overflow vulnerability has been identified in PostScript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code.

    Product
    various
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 21, 2023Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are susceptible to a heap-based buffer overflowCVE-2023-4504 · Other software · OpenPrinting · reported by cve@takeonme.orgHigh 7

    Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are susceptible to a heap-based buffer overflow and possibly code execution. This issue has been fixed in CUPS version 2.4.7, released in September of 2023.

    Product
    CUPS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 18, 2023In Artifex Ghostscript through 10.01.2, gdevijs.c in GhostPDL can lead to remote code execution via crafted PostScript documents because they can switch to the CVE-2023-43115 · Other software · Artifex · reported by MITREHigh 8.8

    In Artifex Ghostscript through 10.01.2, gdevijs.c in GhostPDL can lead to remote code execution via crafted PostScript documents because they can switch to the IJS device, or change the IjsServer parameter, after SAFER has been activated. NOTE: it is a documented risk that the IJS server can be specified on a gs command line (the IJS device inherently must execute a command to start the IJS server).

    Product
    Ghostscript
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 11, 2023Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure VulnerabilityCVE-2023-35324 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 5.5

    Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

    Product
    Windows 10 Version 1809
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 11, 2023Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure VulnerabilityCVE-2023-35306 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 5.5

    Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

    Product
    Windows 10 Version 1809
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 11, 2023Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution VulnerabilityCVE-2023-35302 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8

    Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

    Product
    Windows 10 Version 1809
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 11, 2023Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure VulnerabilityCVE-2023-35296 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 6.5

    Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

    Product
    Windows 10 Version 1809
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 11, 2023Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure VulnerabilityCVE-2023-32085 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 5.5

    Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

    Product
    Windows 10 Version 1809
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 11, 2023Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure VulnerabilityCVE-2023-32040 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 5.5

    Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

    Product
    Windows 10 Version 1809
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 11, 2023Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure VulnerabilityCVE-2023-32039 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 5.5

    Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

    Product
    Windows 10 Version 1809
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jun 13, 2023Microsoft PostScript Printer Driver Remote Code Execution VulnerabilityCVE-2023-32017 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8

    Microsoft PostScript Printer Driver Remote Code Execution Vulnerability

    Product
    Windows 10 Version 1809
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 11, 2023Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution VulnerabilityCVE-2023-28243 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8

    Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

    Product
    Windows 10 Version 1809
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 11, 2023Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution VulnerabilityCVE-2023-24929 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8

    Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

    Product
    Windows 10 Version 1809
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 11, 2023Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution VulnerabilityCVE-2023-24928 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8

    Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

    Product
    Windows 10 Version 1809
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 11, 2023Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution VulnerabilityCVE-2023-24927 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8

    Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

    Product
    Windows 10 Version 1809
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 11, 2023Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution VulnerabilityCVE-2023-24926 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8

    Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

    Product
    Windows 10 Version 1809
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 11, 2023Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution VulnerabilityCVE-2023-24925 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8

    Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

    Product
    Windows 10 Version 1809
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 11, 2023Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution VulnerabilityCVE-2023-24924 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8

    Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

    Product
    Windows 10 Version 1809
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 11, 2023Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution VulnerabilityCVE-2023-24887 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8

    Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

    Product
    Windows 10 Version 1809
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 11, 2023Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution VulnerabilityCVE-2023-24886 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8

    Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

    Product
    Windows 10 Version 1809
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 11, 2023Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution VulnerabilityCVE-2023-24885 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8

    Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

    Product
    Windows 10 Version 1809
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 11, 2023Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution VulnerabilityCVE-2023-24884 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8

    Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

    Product
    Windows 10 Version 1809
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 11, 2023Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure VulnerabilityCVE-2023-24883 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 6.5

    Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

    Product
    Windows 10 Version 1809
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 31, 2023In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential corruption of data internal to the PostScript interpreter, in base/sbcp.CVE-2023-28879 · Other software · Artifex · reported by MITRECritical 9.8

    In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential corruption of data internal to the PostScript interpreter, in base/sbcp.c. This affects BCPEncode, BCPDecode, TBCPEncode, and TBCPDecode. If the write buffer is filled to one byte less than full, and one then tries to write an escaped character, two bytes are written.

    Product
    Ghostscript
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 14, 2023Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution VulnerabilityCVE-2023-24913 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8

    Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

    Product
    Windows 10 Version 1809
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 14, 2023Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure VulnerabilityCVE-2023-24911 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 4.3

    Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

    Product
    Windows 10 Version 1809
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 14, 2023Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution VulnerabilityCVE-2023-24909 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8

    Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

    Product
    Windows 10 Version 1809
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 14, 2023Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution VulnerabilityCVE-2023-24907 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8

    Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

    Product
    Windows 10 Version 1809
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 14, 2023Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure VulnerabilityCVE-2023-24906 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 6.5

    Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

    Product
    Windows 10 Version 1809
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 14, 2023Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution VulnerabilityCVE-2023-24876 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8

    Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

    Product
    Windows 10 Version 1809
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 14, 2023Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution VulnerabilityCVE-2023-24872 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8

    Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

    Product
    Windows 10 Version 1809
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.

Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.

Weekly security brief

The flaws that hit local websites, every Friday.

One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.

Get in touch

Tell us what you're building.

A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.

01The person who'll do the work writes back
02A short call, then a written plan with the price
03Nothing starts until you say yes
04Hacked or down right now? Call, and we pick up the same day
843-331-6339

Not ready to talk yet? Run the free website check and see what Google sees.

What do you need?
Build
Grow
Protect
Urgent

No newsletter, no sales sequence. Just a reply.