CVE-2026-69301: Windows Win32k Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.
Other sources
Windows Win32k Elevation of Privilege Vulnerability
— Microsoft
Affected Software
Remediation
Event History
Frequently Asked Questions
Which systems should be prioritized for review?
The affected software list includes Microsoft Windows 10, Windows 11, Windows Server 2012 R2, Windows Server 2016, Windows Server 2019, Windows Server 2022, and Windows Server 2025.
What access and conditions does an attacker need?
The vector indicates network-based exploitation with low privileges required. User interaction is also required, so the attacker cannot exploit it solely through an unauthenticated network request.
What could a successful exploit allow?
The vulnerability is rated high severity and indicates high impact to confidentiality, integrity, and availability. The scope is unchanged, meaning the impact is assessed within the vulnerable security authority.