Executive brief
The Windows HTTP Print Provider is a system component that handles printing over network connections. A heap buffer overflow vulnerability allows attackers to execute arbitrary code remotely without authentication, potentially compromising the entire system and enabling lateral movement across a network.
Technical details
A heap-based buffer overflow exists in the Windows HTTP Print Provider, a core Windows component responsible for network printing functionality. The vulnerability can be exploited remotely over the network without requiring prior authentication or user interaction. An attacker can exploit this flaw to execute arbitrary code with system privileges, leading to complete system compromise. The vulnerability was publicly disclosed on September 8, 2026, and Microsoft has released security updates.
Affected products
- Microsoft Windows <UNKNOWN>
Timeline
- 2026-09-08: disclosed
- 2026-09-08: advisory