Vasion Print Virtual Appliance Host prior to version 25.1.102 and Application versions prior to 25.1.1413 include 32-bit Windows client binaries lacking modern memory safety mitigations (DEP, ASLR, CFG, stack protection) and use legacy runtimes (Pascal/Delphi, Python 2). Several of these processes run with NT AUTHORITY\SYSTEM privileges and automatically download and install printer drivers. The absence of exploit mitigations combined with elevated privileges and legacy code increases the likelihood that memory corruption or other exploit primitives from crafted driver content or malicious inputs could lead to remote or local code execution and privilege escalation to SYSTEM. The vulnerability is tracked as CWE-755 (Improper Handling of Exceptional Conditions) and CWE-1104 (Use of Unmaintained Third Party Components). Although the patch date is not specified, the vulnerability is confirmed remediated.

Successful exploitation could allow an attacker to achieve local or remote code execution with SYSTEM privileges on affected Vasion Print Virtual Appliance Hosts. This could enable full control over the host system, including installing malicious drivers or executing arbitrary code. The lack of modern exploit mitigations and use of outdated runtimes significantly increase the risk of exploitation. No known exploits in the wild have been reported to date.

The vulnerability has been confirmed as remediated by the vendor, though the exact patch introduction date is not specified. Users should ensure they are running Vasion Print Virtual Appliance Host version 25.1.102 or later and Application version 25.1.1413 or later to benefit from the fix. Since this is not a cloud service, remediation requires updating the affected software to the fixed versions. Patch status beyond this confirmation is not explicitly detailed; users should consult Vasion's official advisories for the latest remediation guidance.