CVE-2026-85908
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk28th percentile - higher than 28% of all known CVEs
Summary
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with valid credentials can exploit this flaw to gain higher privileges, potentially resulting in full system control.
Recommendation
Install Microsoft updates for Windows Win32K - GRFX as soon as possible and restrict local access to trusted users.
Other vulnerabilities in Windows Win32K - GRFX
See all- CVE-2026-40403High
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to execute code locally.
- CVE-2026-34333High
A use after free vulnerability in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
- CVE-2026-34331High
There is a concurrent execution issue in Windows Win32K - GRFX due to improper synchronization, leading to a race condition. This allows an authorized attacker to elevate privileges locally.
- CVE-2025-26687High
A use after free vulnerability in Windows Win32K - GRFX allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-56176High
An out-of-bounds read vulnerability in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
- CVE-2026-44812High
An integer overflow vulnerability in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.
- CVE-2026-44803High
An integer overflow vulnerability in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.
- CVE-2026-33104High
A race condition in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally via concurrent execution of a shared resource without proper synchronization.
Original NVD description (English source)
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS