Executive brief
Windows Win32K is a core kernel-mode driver responsible for graphics and window management on all Windows systems. A use-after-free vulnerability in this component allows a local attacker with user-level access to gain administrative privileges, compromising the entire system and potentially enabling malware installation or data theft.
Technical details
This is a use-after-free vulnerability in the Windows Win32K kernel driver, which can be exploited by an authorized local attacker to elevate privileges. The vulnerability requires local access and existing user privileges to trigger. An attacker who successfully exploits this flaw can achieve arbitrary code execution with kernel privileges, resulting in complete system compromise. Microsoft has released security updates to address this issue.
Affected products
- Microsoft Windows
Timeline
- 2026-09-08: disclosed