Executive brief
Microsoft Standard XPS is a document processing component used to view and handle XPS (XML Paper Specification) files. A heap buffer overflow flaw allows an authorized user to execute arbitrary code and escalate privileges on a system or across a network, potentially leading to system compromise and data breach.
Technical details
A heap-based buffer overflow vulnerability exists in Microsoft Standard XPS due to insufficient bounds checking when processing malformed XPS documents. The flaw requires an attacker to be authenticated and have network access to the affected system. Successful exploitation allows privilege escalation and arbitrary code execution with system-level permissions. A patch is available through Microsoft's security updates.
Affected products
- Microsoft Standard XPS
Timeline
- 2026-09-08: disclosed