Is CVE-2026-34330 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-34330 being exploited in the wild.

How severe is CVE-2026-34330?

High severity, with a CVSS score of 7.8, published 12 May 2026.

Which products and versions are affected?

Microsoft Windows Win32K - GRFX component.

Is there a fix for CVE-2026-34330?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-34330 attacked?

It is attacked with local access, in an operating system.

Am I affected by CVE-2026-34330?

Check whether you run Microsoft Windows at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-34330: Microsoft Windows Win32K race condition in GRFX component

CVE-2026-34330 · Severity: high · CVSS 7.8 · Published 2026-05-12

A security vulnerability exists in the Windows graphics component that could allow a user with basic access to take full control of a computer. By exploiting a synchronization error in how the system handles shared resources, an attacker can bypass security restrictions to gain administrative privileges. This could lead to unauthorized software installation, data theft, or complete system compromise.

Technologies: Microsoft Windows. Vendors: Microsoft.

Quick answers

Is CVE-2026-34330 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-34330 being exploited in the wild.
How severe is CVE-2026-34330?: High severity, with a CVSS score of 7.8, published 12 May 2026.
Which products and versions are affected?: Microsoft Windows Win32K - GRFX component.
Is there a fix for CVE-2026-34330?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-34330 attacked?: It is attacked with local access, in an operating system.
Am I affected by CVE-2026-34330?: Check whether you run Microsoft Windows at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

This vulnerability is a race condition (CWE-362) within the Windows Win32K - GRFX component, specifically related to improper synchronization during concurrent execution using shared resources. While initial reports also mentioned integer overflow (CWE-190) and use-after-free (CWE-416) weaknesses, the primary root cause is identified as a synchronization issue. An attacker with local access and low privileges can exploit this flaw to execute code with elevated system permissions. The vulnerability affects a wide range of Windows client and server versions, and Microsoft has released security updates to address the issue.

Affected products

Microsoft Windows 10 1607, 1809, 21H2, 22H2
Microsoft Windows 11 23H2, 24H2, 26H1
Microsoft Windows Server 2012, 2012 R2, 2016, 2019

Timeline

2026-05-12: disclosed: Initial disclosure by Microsoft
2026-05-12: advisory: NVD entry published
2026-06-01: other: Vulnerability description updated from integer overflow to race condition

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34330

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.