CVE-2025-53132

Technical details for CVE-2025-53132 (Windows Win32K GRFX race condition privilege escalation) are not provided in the connected documents. Public specifics (affected versions, exploit details, or fixes) are not available here; monitor for updates from official advisories.

CVE-2025-50168

CVE-2025-50168 is a local privilege-escalation vulnerability in Windows Win32K ICOMP caused by a type-confusion in resource access. The issue affects Win32K-ICOMP and can lead to elevated privileges for an authorized local attacker. Microsoft released August 2025 security updates that fix this vu...

CVE-2025-53132: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...

CVE-2025-50168: Access of Resource Using Incompatible Type

Access of resource using incompatible type 'type confusion' in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally...

CVE-2025-49727

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...

CVE-2025-49727

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...

CVE-2025-49733

CVE-2025-49733 is a local privilege escalation in Windows Win32K ICOMP due to a use-after-free condition. The vulnerability can be exploited locally by an authenticated user to obtain elevated privileges. Microsoft’s July 2025 security updates address this issue (driver/OS updates noted in KBs an...

CVE-2025-49727

CVE-2025-49727 is described as a heap-based buffer overflow in Windows Win32K GRFX that could allow an authorized attacker to elevate privileges locally. The provided initial description confirms the vulnerability class and impact (local privilege escalation) but does not include concrete informa...

CVE-2025-49733: Use After Free

Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally...

PT-2025-28565

Name of the Vulnerable Software and Affected Versions: Windows Win32K affected versions not specified Description: The issue is related to a double free in Windows Win32K - ICOMP, which allows an authorized attacker to elevate privileges locally. Recommendations: At the moment, there is no...

CVE-2025-49727: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...

PT-2025-28616 · Microsoft · Windows Win32K +1

Name of the Vulnerable Software and Affected Versions: Windows Win32K - GRFX affected versions not specified Description: A heap-based buffer overflow issue in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. Recommendations: At the moment, there is no informatio...

PT-2025-28621 · Microsoft · Windows Win32K +1

Name of the Vulnerable Software and Affected Versions: Windows Win32K affected versions not specified Description: The issue is related to a use after free condition in Windows Win32K - ICOMP, which allows an authorized attacker to elevate privileges locally. Recommendations: At the moment, there...

PT-2025-24826 · Microsoft · Windows Win32K +1

Name of the Vulnerable Software and Affected Versions: Windows Win32K affected versions not specified Description: The issue is related to a use after free condition in the Windows Win32K - GRFX component, which allows an authorized attacker to elevate privileges locally. Recommendations: At the...

CVE-2025-32712: Use After Free

Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...

PT-2025-20998

Name of the Vulnerable Software and Affected Versions: Windows Win32K versions prior to the fixed version Description: The issue is a heap-based buffer overflow in Windows Win32K - GRFX, allowing an unauthorized attacker to execute code locally. This enables an attacker to gain SYSTEM-level acces...

CVE-2025-26687

Use after free in Windows Win32K - GRFX allows an unauthorized attacker to elevate privileges over a network...

CVE-2025-26681

Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...

CVE-2025-26681

Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...

CVE-2025-27732

CVE-2025-27732 is a Windows Graphics Component Elevation of Privilege vulnerability in the Win32K GRFX subsystem. The flaw stems from Sensitive data stored in improperly locked memory in the GRFX path, enabling an authorized, local attacker to elevate privileges. The vulnerability affects Windows...