Junglewise Threat Intelligence

CVE-2026-50325: Microsoft Windows Win32K privilege escalation

CVE-2026-50325 · Severity: high · CVSS 7 · Published 2026-07-14

Technologies: Microsoft Windows 10 Version 1607, Microsoft Windows 11 Version 26H1, Microsoft Windows Server 2012, Microsoft Windows 11 Version 24H2, Microsoft Windows 10, Microsoft Windows 10 Version 1809, Microsoft Windows 10 Version 21H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11, Microsoft Windows 10 Version 22H2. Vendors: Microsoft.

Executive brief

A security vulnerability exists in the Windows Win32K component, which handles graphics and window management. An attacker who already has basic access to a computer could exploit this flaw to gain full administrative control. This could allow them to view sensitive data, install malicious software, or disrupt business operations.

Technical details

This vulnerability is classified as an improper access control issue (CWE-284) within the Windows Win32K kernel-mode driver. An attacker with low-privileged local access can exploit this flaw to elevate their privileges to SYSTEM level. The attack requires the attacker to execute a specially crafted application locally, and the complexity is rated as high, suggesting specific timing or environmental conditions are necessary for successful exploitation. Microsoft has released security updates to address this issue across affected Windows and Windows Server versions.

Affected products

  • Microsoft Windows 10 Version 1607 < 10.0.14393.9339
  • Microsoft Windows 10 Version 1809 < 10.0.17763.9020
  • Microsoft Windows 10 Version 21H2 < 10.0.19044.7548
  • Microsoft Windows 10 Version 22H2 < 10.0.19045.7548
  • Microsoft Windows 11 Version 24H2 < 10.0.26100.8875
  • Microsoft Windows 11 Version 25H2 < 10.0.26200.8875
  • Microsoft Windows 11 version 26H1 < 10.0.28000.2269
  • Microsoft Windows Server 2012 < 6.2.9200.26226

Timeline

  • 2026-07-14: advisory: Initial publication by Microsoft and NVD

References

Related threats