CVE-2026-57095

Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an unauthorized attacker to elevate privileges locally...

CVE-2026-56176

Out-of-bounds read in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...

CVE-2026-50489

Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-54986

Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-54112

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-54114

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-54107

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-50325

Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-50297

Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-49805

Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-57095 Win32k Elevation of Privilege Vulnerability

...

CVE-2026-56184 Win32k Information Disclosure Vulnerability

...

CVE-2026-56184

CVE-2026-56184 describes a local information disclosure in Windows Win32K, enabling an authorized attacker to disclose sensitive information locally. The NVD entry notes a medium severity (CVSS v3.1: 5.5) with local access and low attack complexity but high confidentiality impact. Public details ...

CVE-2026-56176 Windows Win32k Elevation of Privilege Vulnerability

...

CVE-2026-56176

CVE-2026-56176 – Windows Win32K GRFX: Affected component is the Win32K GRFX subsystem. The vulnerability is an out-of-bounds read that allows an authorized local attacker to elevate privileges on Windows. The CVE is backed by multiple sources in connected documents (NVD/NCSC and MS advisories) co...

CVE-2026-56176 Windows Win32k Elevation of Privilege Vulnerability

...

CVE-2026-50687 Windows Win32k Elevation of Privilege Vulnerability

...

CVE-2026-50687

CVE-2026-50687 is a Windows Win32k local privilege-escalation vulnerability caused by a use-after-free in the Windows Kernel. It affects the Win32k subsystem and enables an authenticated attacker to elevate privileges locally (base CVSS v3.1 score 8.8, vector: LOCAL, LOW complexity, LOW privilege...

CVE-2026-50688 Windows Win32k Elevation of Privilege Vulnerability

...

CVE-2026-50688

CVE-2026-50688 is a Windows Win32k elevation-of-privilege vulnerability described as a use-after-free in the Win32k subsystem that allows a locally authenticated attacker to gain higher privileges. The connected documents confirm the CVE title and its Windows kernel context, with advisories and C...