Windows Win32K vulnerabilities
44 known CVE vulnerabilities in Windows Win32K, translated and rated.
- CVE-2026-34347High
A use after free vulnerability in Windows Win32K allows an authorized attacker to elevate privileges locally.
- CVE-2026-33839High
A race condition in Windows Win32K allows an authorized attacker to locally elevate privileges due to improper synchronization during concurrent execution using shared resources.
- CVE-2026-24285High
A use after free vulnerability in Windows Win32K allows an authorized attacker to elevate privileges locally.
- CVE-2025-30388High
CVE-2025-30388 involves a heap-based buffer overflow in the Win32K driver in Windows, allowing an unauthorized attacker to execute code locally.
- CVE-2022-41109High
Vulnerability in Windows Win32k allows elevation of privilege. It could be exploited to gain higher privileges on the system.
- CVE-2022-21882HighActively exploited
Win32k Elevation of Privilege Vulnerability.
- CVE-2021-26863High
Elevation of Privilege vulnerability in Windows Win32k. Details are not provided in the description.
- CVE-2021-1732HighActively exploited
A vulnerability in the Win32k component of Windows allows elevation of privilege. An attacker could exploit it to gain higher privileges on the system.
- CVE-2019-1458HighActively exploited
A vulnerability in Windows when the Win32k component fails to properly handle objects in memory allows elevation of privilege.
- CVE-2018-8120HighActively exploited
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability.' This affects Windows Server 2008, Windows 7, Windows Server 2008 R2. This CVE ID is unique from CVE-2018-8124, CVE-2018-8164, CVE-2018-8166.
- CVE-2026-65776High
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
- CVE-2026-65775High
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
- CVE-2026-65678High
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
- CVE-2026-62885High
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
- CVE-2026-62877High
Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
- CVE-2026-62876High
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.
- CVE-2026-62798Medium
Untrusted pointer dereference in Windows Win32K allows an authorized attacker to disclose information locally.
- CVE-2026-62786Medium
An out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.
- CVE-2026-62746Medium
A buffer over-read in Windows Win32K allows an authorized attacker to disclose information locally.
- CVE-2026-62743Medium
An out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.
- CVE-2026-62733High
An out-of-bounds read exists in Windows Win32K. This allows an authorized attacker to elevate privileges locally.
- CVE-2026-62712High
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
- CVE-2026-62711High
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
- CVE-2026-58632High
A use-after-free vulnerability in Windows Win32K allows an authorized attacker to elevate privileges locally.
- CVE-2026-57095Medium
Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an unauthorized attacker to elevate privileges locally.
- CVE-2026-56184Medium
Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an authorized attacker to disclose information locally.
- CVE-2026-50489High
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
- CVE-2026-50416Low
A vulnerability in Windows Win32K allows an authorized attacker to disclose sensitive information to an unauthorized actor locally.
- CVE-2026-54986High
A heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
- CVE-2026-54114High
Use-After-Free vulnerability in Windows Win32K allows an authorized attacker to elevate privileges locally.
- CVE-2026-54112High
A race condition vulnerability due to improper synchronization of shared resources has been discovered in the Windows Win32K component. This flaw allows an authorized attacker to elevate privileges locally.
- CVE-2026-54107High
A race condition in the Windows Win32K driver allows an authorized attacker to elevate privileges locally due to improper synchronization of shared resources. This vulnerability can be exploited to gain higher system privileges.
- CVE-2026-50325High
An improper access control vulnerability exists in Windows Win32K. This allows an authorized attacker to elevate privileges locally.
- CVE-2026-50297High
An improper access control vulnerability exists in Windows Win32K. This allows an authorized attacker to elevate privileges locally.
- CVE-2026-49805High
The Windows Win32K component has an improper access control vulnerability that allows an authorized attacker to elevate privileges locally.
- CVE-2026-33840High
A use after free vulnerability in Windows Win32K allows an authorized attacker to elevate privileges locally.
- CVE-2026-20920High
A use-after-free vulnerability in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.
- CVE-2026-20870High
A use-after-free vulnerability in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.
- CVE-2026-20863High
A double free vulnerability in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.
- CVE-2026-20811High
A type confusion vulnerability in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.
- CVE-2022-41092High
Elevation of privilege vulnerability in Windows Win32k. Could be exploited to gain elevated privileges.
- CVE-2021-27077High
Elevation of Privilege vulnerability in Windows Win32k. An attacker could exploit this vulnerability to gain elevated privileges on the system.
- CVE-2021-26900High
Elevation of privilege vulnerability in the Windows Win32k driver. It allows a local attacker to gain higher privileges on the system.
- CVE-2021-26875High
Elevation of privilege vulnerability in Windows Win32k. An attacker could exploit it to gain elevated privileges on the system.

