CVE-2026-49805

Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-57095 Win32k Elevation of Privilege Vulnerability

...

CVE-2026-57095 Win32k Elevation of Privilege Vulnerability

...

EUVD-2026-44265

Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an unauthorized attacker to elevate privileges locally...

CVE-2026-56184 Win32k Information Disclosure Vulnerability

...

CVE-2026-56184

CVE-2026-56184 describes a local information disclosure in Windows Win32K, enabling an authorized attacker to disclose sensitive information locally. The NVD entry notes a medium severity (CVSS v3.1: 5.5) with local access and low attack complexity but high confidentiality impact. Public details ...

CVE-2026-56184 Win32k Information Disclosure Vulnerability

...

CVE-2026-56176

CVE-2026-56176 – Windows Win32K GRFX: Affected component is the Win32K GRFX subsystem. The vulnerability is an out-of-bounds read that allows an authorized local attacker to elevate privileges on Windows. The CVE is backed by multiple sources in connected documents (NVD/NCSC and MS advisories) co...

CVE-2026-56176 Windows Win32k Elevation of Privilege Vulnerability

...

CVE-2026-56176 Windows Win32k Elevation of Privilege Vulnerability

...

CVE-2026-50687

CVE-2026-50687 is a Windows Win32k local privilege-escalation vulnerability caused by a use-after-free in the Windows Kernel. It affects the Win32k subsystem and enables an authenticated attacker to elevate privileges locally (base CVSS v3.1 score 8.8, vector: LOCAL, LOW complexity, LOW privilege...

CVE-2026-50687 Windows Win32k Elevation of Privilege Vulnerability

...

CVE-2026-50687 Windows Win32k Elevation of Privilege Vulnerability

...

CVE-2026-50688 Windows Win32k Elevation of Privilege Vulnerability

...

CVE-2026-50688

CVE-2026-50688 is a Windows Win32k elevation-of-privilege vulnerability described as a use-after-free in the Win32k subsystem that allows a locally authenticated attacker to gain higher privileges. The connected documents confirm the CVE title and its Windows kernel context, with advisories and C...

CVE-2026-50688 Windows Win32k Elevation of Privilege Vulnerability

...

CVE-2026-50670

CVE-2026-50670 is a Windows Win32k elevation-of-privilege vulnerability caused by an out-of-bounds read in the Windows kernel. Connected sources confirm local privilege escalation potential and indicate Microsoft has released updates (e.g., KB5099538/KB5099540; MSRC guidance) addressing this issu...

CVE-2026-50670 Windows Win32k Elevation of Privilege Vulnerability

...

CVE-2026-50670 Windows Win32k Elevation of Privilege Vulnerability

...

CVE-2026-50489

CVE-2026-50489 is a heap-based buffer overflow in Windows Win32K that allows an authorized, locally authenticated attacker to escalate privileges. The root cause is a memory corruption in the Win32K subsystem that leads to code execution with SYSTEM rights. The CVE entry is supported by multiple ...