CVE-2026-50100
Received
Received - Intake
Privilege Escalation in Ricoh and Konica Minolta Printer Drivers
Publication date: 2026-06-15
Last updated on: 2026-06-15
Assigner: JPCERT/CC
Description
Description
Multiple printer drivers provided by Ricoh Company, Ltd. and KONICA MINOLTA JAPAN, INC. contain a privilege escalation vulnerability. If this vulnerability is exploited, an attacker who can log in to a computer running an affected printer driver could elevate privileges by using a specially crafted driver.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| ricoh | printer_driver | to 1.5.0.0 (exc) |
| konicaminolta | printer_driver | to 1.3.0.0 (exc) |
| konicaminolta | pc_fax_driver | to 13.0 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-427 | The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors. |