CVE-2026-61346: Windows Graphics Kernel Elevation of Privilege Vulnerability
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
Other sources
Windows Graphics Kernel Elevation of Privilege Vulnerability
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.28000.2704Patch KB5121000 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.9168Fixed in 10.0.26000.9106Patch KB5120994 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.9168Fixed in 10.0.26100.9106Patch KB5120994 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.33296Fixed in 10.0.26100.33222Patch KB5120228 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19045.7663Patch KB5120249 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.22631.7517Patch KB5120240 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26200.9168Fixed in 10.0.26100.9106Patch KB5120994 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19044.7663Patch KB5120249 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.17763.9115Patch KB5120238 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.20348.5499Fixed in 10.0.20348.5440Patch KB5120229
Event History
Frequently Asked Questions
What is the severity of CVE-2026-61346?
CVE-2026-61346 has a severity rating of high, with a score of 7.
How does CVE-2026-61346 affect systems?
CVE-2026-61346 allows an authorized attacker to elevate privileges locally in affected Windows operating systems.
Which software versions are impacted by CVE-2026-61346?
CVE-2026-61346 affects Microsoft Windows 11, Windows 10, Windows Server 2019, Windows Server 2022, and Windows Server 2025.
What kind of vulnerability is CVE-2026-61346?
CVE-2026-61346 is classified as a Use After Free vulnerability in the Windows Graphics Kernel.
How can I protect my system from CVE-2026-61346?
To protect your system from CVE-2026-61346, ensure you apply the latest patches and updates provided by Microsoft.