CVE-2026-61346
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
A use-after-free vulnerability in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker could exploit the flaw to execute code with elevated privileges, potentially leading to system takeover.
Recommendation
Apply security updates. Restrict access to graphics to trusted applications only.
Other vulnerabilities in Windows Graphics Kernel
See all- CVE-2026-96118High
An out-of-bounds read vulnerability in Windows Graphics Kernel allows an authenticated attacker to elevate privileges locally. The flaw stems from improper reading of data beyond buffer boundaries in the graphics kernel.
- CVE-2026-88110High
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-88073High
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-73017High
Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to execute code locally.
- CVE-2026-62774High
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-62702Medium
Null pointer dereference in Windows Graphics Kernel allows an unauthorized attacker to cause denial of service over a network.
- CVE-2026-50493High
Use-after-free vulnerability in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS