CVE-2026-83841
HighCVSS 7.0Summary
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker could exploit the race condition to execute code with elevated privileges, potentially leading to system takeover.
Recommendation
Apply the latest Windows security updates.
Other vulnerabilities in Windows Win32K
See all- CVE-2026-85901High
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
- CVE-2026-83883High
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
- CVE-2026-83866High
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
- CVE-2026-83762High
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
- CVE-2026-83757High
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
- CVE-2026-83732High
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
- CVE-2026-83721High
A use after free vulnerability in Windows Win32K allows an authorized attacker to elevate privileges locally.
- CVE-2026-70286High
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
- CVE-2026-34347High
A use after free vulnerability in Windows Win32K allows an authorized attacker to elevate privileges locally.
- CVE-2026-33839High
A race condition in Windows Win32K allows an authorized attacker to locally elevate privileges due to improper synchronization during concurrent execution using shared resources.
Original NVD description (English source)
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS