CVE-2026-69271

CVE-2026-69271 is a heap-based buffer overflow (CWE-122) in Microsoft Standard XPS, the component that processes XPS (XML Paper Specification) documents. An authorized (low-privileged) attacker can trigger it over the network by getting a user to process crafted XPS content, since the CVSS vector requires user interaction (UI:R). Successful exploitation lets the attacker elevate privileges on the target system, with high impact on confidentiality, integrity, and availability. Any Windows environment using the affected Standard XPS component is exposed, though the source data does not specify affected version ranges. Exploitation is not yet observed: the flaw is not in CISA KEV, no public proof-of-concept is known, and EPSS of 0.7% (51st percentile) indicates a low near-term exploitation probability.

What to do: Apply Microsoft's security update for CVE-2026-69271 via Windows Update as soon as it is available, and verify installed builds against the affected ranges in Microsoft's advisory. Prioritize hosts where standard users open or print untrusted XPS documents, since exploitation requires user interaction; interim mitigation includes filtering or discouraging opening of untrusted .xps files. Because no public PoC or in-the-wild exploitation exists, treat this as a routine but prompt patch cycle rather than an emergency.