CVE-2026-50100: Multiple printer drivers provided by Ricoh Company, Ltd

Synopsis

A privilege escalation vulnerability affects multiple printer drivers provided by Ricoh Company, Ltd. and KONICA MINOLTA JAPAN, INC. The flaw is reached locally, requiring an attacker to already have a low-privilege account on the machine running the affected driver, with no network exposure or victim interaction needed (CVSS 8.5 High, CVSS v4.0). Successful exploitation lets the attacker elevate their privileges on the host, gaining capabilities beyond those of their original account. No fix versions have been published yet; HarborGuard tracks the advisory and will flag a patched-image rebuild the moment upstream vendors release one.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityNot required

  The attacker needs an existing shell or process on the host running the affected printer driver; no network path is required.

• AuthenticationRequired

  Any low-privilege local account on the affected machine is sufficient; no administrative credentials are needed to reach the vulnerable code path.

• Victim interactionNot required

  The attacker acts entirely on their own; no user action or social engineering is required.

• Attack complexityDetail

  Exploitation is straightforward and condition-free, with no race conditions or specific memory layout requirements needed to succeed.

Blast Radius

• Attacker elevates privileges beyond their original low-privilege account, gaining higher-level access on the host.
• Attacker reads sensitive files, credentials, or data accessible only to elevated accounts on the compromised machine.
• Attacker modifies system files, configurations, or persisted data that the original low-privilege account could not touch.
• Attacker disrupts services or processes running under elevated accounts, potentially crashing or destabilizing the host.