Published:2026/06/15  Last Updated:2026/06/15

JVN#55319858
Privilege escalation vulnerability in multiple RICOH and KONICA MINOLTA JAPAN printer drivers

Overview

Multiple printer drivers provided by RICOH and KONICA MINOLTA JAPAN contain a privilege escalation vulnerability.

Products Affected

As for the details of affected product names and versions, refer to the information provided by the respective vendors listed below:

Description

Multiple printer drivers provided by RICOH and KONICA MINOLTA JAPAN contain the following vulnerability:

  • Privilege escalation (CWE-427)
    • CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Base Score 8.5
    • CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Base Score 7.8
    • CVE-2026-50100

Impact

An attacker who can log in to a computer running an affected printer driver could elevate privileges by using a specially crafted driver.

Solution

Use the latest driver
Use the latest driver which have fixed this vulnerability.

Vendor Status

Vendor Status Last Update Vendor Notes
KONICA MINOLTA JAPAN, INC. Vulnerable 2026/06/15 KONICA MINOLTA JAPAN, INC. website
Vendor Link
Ricoh Company, Ltd. Specific Ricoh MFPs, Printers, Digital Duplicators, and Production Printers: Privilege Escalation Vulnerability Affecting Multiple Printer and LAN-FAX Drivers

References

JPCERT/CC Addendum

Vulnerability Analysis by JPCERT/CC

Credit

Ricoh Company, Ltd. reported this vulnerability to IPA to notify users of its solution through JVN. JPCERT/CC and Ricoh Company, Ltd. coordinated under the Information Security Early Warning Partnership.

Other Information

JPCERT Alert
JPCERT Reports
CERT Advisory
CPNI Advisory
TRnotes
CVE CVE-2026-50100
JVN iPedia JVNDB-2026-000085