CVE-2025-30388
HighSummary
CVE-2025-30388 involves a heap-based buffer overflow in the Win32K driver in Windows, allowing an unauthorized attacker to execute code locally.
Risk Assessment
An attacker could exploit this vulnerability to gain unauthorized access to the system, potentially leading to serious security implications for the organization.
Recommendation
It is recommended to update Windows to the latest version to patch this vulnerability and to monitor systems for unauthorized activities.
Other vulnerabilities in Windows Win32K
See all- CVE-2026-85901High
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
- CVE-2026-83883High
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
- CVE-2026-83866High
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
- CVE-2026-83841High
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to elevate privileges locally.
- CVE-2026-83762High
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
- CVE-2026-83757High
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
- CVE-2026-83732High
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
- CVE-2026-83721High
A use after free vulnerability in Windows Win32K allows an authorized attacker to elevate privileges locally.
- CVE-2026-70286High
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
- CVE-2026-34347High
A use after free vulnerability in Windows Win32K allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Heap-based buffer overflow in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS