CVE-2026-102194
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
A use after free vulnerability in the Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with valid credentials could exploit this flaw to gain higher privileges on the system, potentially leading to full compromise of the host.
Recommendation
Apply Microsoft security updates for the Windows Graphics Kernel as soon as possible and restrict local access to trusted users.
Other vulnerabilities in Windows Graphics Kernel
See all- CVE-2026-96118High
An out-of-bounds read vulnerability in Windows Graphics Kernel allows an authenticated attacker to elevate privileges locally. The flaw stems from improper reading of data beyond buffer boundaries in the graphics kernel.
- CVE-2026-88110High
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-88073High
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-83582Medium
A use after free vulnerability exists in Windows Graphics Kernel. An authorized attacker can exploit this to disclose information locally.
- CVE-2026-73017High
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to execute code locally.
- CVE-2026-62774High
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-62702Medium
Null pointer dereference in Windows Graphics Kernel allows an unauthorized attacker to cause denial of service over a network.
- CVE-2026-61346High
A use-after-free vulnerability in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-50493High
Use-after-free vulnerability in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS