CVE-2026-50100

Printer Driver Privilege Escalation via Malicious Driver

Published Jun 15, 2026 CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Description
Multiple printer drivers provided by Ricoh Company, Ltd. and KONICA MINOLTA JAPAN, INC. contain a privilege escalation vulnerability. If this vulnerability is exploited, an attacker who can log in to a computer running an affected printer driver could elevate privileges by using a specially crafted driver.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
First Time appeared Konica Minolta
Konica Minolta multiple Printer Drivers
Ricoh
Ricoh multiple Printer Drivers
Vendors & Products Konica Minolta
Konica Minolta multiple Printer Drivers
Ricoh
Ricoh multiple Printer Drivers
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Type Values Removed Values Added
Title Printer Driver Privilege Escalation via Malicious Driver
Type Values Removed Values Added
Description Multiple printer drivers provided by Ricoh Company, Ltd. and KONICA MINOLTA JAPAN, INC. contain a privilege escalation vulnerability. If this vulnerability is exploited, an attacker who can log in to a computer running an affected printer driver could elevate privileges by using a specially crafted driver.
Weaknesses CWE-427
References
Metrics cvssV3_0

{'score': 7.8, 'vector': 'CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

cvssV4_0

{'score': 8.5, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
jpcert
Published
Updated
Jun 16, 2026, 3:56 AM
Reserved
Jun 9, 2026, 4:19 AM
Status
Deferred
Published
Jun 15, 2026, 10:16 AM
Modified
Jul 24, 2026, 7:10 PM