Executive brief
Windows Win32K is a core kernel-mode graphics and windowing subsystem that handles display rendering and window management for all graphical applications. An out-of-bounds read vulnerability allows an authenticated local attacker to read memory outside intended boundaries, which they can exploit to elevate their privileges from a standard user to administrator. This could enable an attacker to gain full control of a compromised system.
Technical details
This vulnerability is an out-of-bounds read in Windows Win32K, the kernel-mode graphics subsystem. The root cause lies in improper bounds checking when processing window or graphics-related operations in the Win32K driver. An authenticated attacker with local access can trigger the out-of-bounds read to leak sensitive kernel memory, which can then be leveraged to bypass Address Space Layout Randomization (ASLR) and execute a local privilege escalation attack. Preconditions include local system access and user-level privileges; no network vector exists. Microsoft has released security updates to patch this vulnerability.
Affected products
- Microsoft Windows Multiple versions affected (specific versions require Microsoft update guidance)
Timeline
- 2026-09-08: disclosed: Published by Microsoft Security Response Center