Windows Win32K vulnerabilities
77 known CVE vulnerabilities in Windows Win32K, translated and rated.
- CVE-2026-85901High
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
- CVE-2026-83883High
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
- CVE-2026-83866High
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
- CVE-2026-83841High
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to elevate privileges locally.
- CVE-2026-83762High
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
- CVE-2026-83757High
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
- CVE-2026-34347High
A use after free vulnerability in Windows Win32K allows an authorized attacker to elevate privileges locally.
- CVE-2026-33839High
A race condition in Windows Win32K allows an authorized attacker to locally elevate privileges due to improper synchronization during concurrent execution using shared resources.
- CVE-2026-24285High
A use after free vulnerability in Windows Win32K allows an authorized attacker to elevate privileges locally.
- CVE-2025-30388High
CVE-2025-30388 involves a heap-based buffer overflow in the Win32K driver in Windows, allowing an unauthorized attacker to execute code locally.
- CVE-2022-41109High
Vulnerability in Windows Win32k allows elevation of privilege. It could be exploited to gain higher privileges on the system.
- CVE-2022-21882HighActively exploited
Win32k Elevation of Privilege Vulnerability.
- CVE-2021-26863High
Elevation of Privilege vulnerability in Windows Win32k. Details are not provided in the description.
- CVE-2021-1732HighActively exploited
A vulnerability in the Win32k component of Windows allows elevation of privilege. An attacker could exploit it to gain higher privileges on the system.
- CVE-2019-1458HighActively exploited
A vulnerability in Windows when the Win32k component fails to properly handle objects in memory allows elevation of privilege.
- CVE-2019-1132HighActively exploited
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'.
- CVE-2019-0859HighActively exploited
An elevation of privilege vulnerability in Windows, caused by improper handling of objects in memory by the Win32k component. A local attacker could exploit this to gain elevated privileges.
- CVE-2019-0803HighActively exploited
An elevation of privilege vulnerability in Windows, caused by improper handling of objects in memory by the Win32k component. A local attacker could exploit this to gain elevated privileges.
- CVE-2018-8120HighActively exploited
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability.' This affects Windows Server 2008, Windows 7, Windows Server 2008 R2. This CVE ID is unique from CVE-2018-8124, CVE-2018-8164, CVE-2018-8166.
- CVE-2026-70283High
Incorrect authorization in Windows Win32K allows an authorized attacker to elevate privileges locally.
- CVE-2026-69853Medium
Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally.
- CVE-2026-69844High
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.
- CVE-2026-69832Medium
A vulnerability in Windows Win32K allows exposure of sensitive system information to an unauthorized control sphere. An authorized attacker can disclose information locally.
- CVE-2026-69818High
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
- CVE-2026-69808Medium
An out-of-bounds read vulnerability in Windows Win32K allows an authorized attacker to disclose information locally.
- CVE-2026-69792Medium
A race condition vulnerability in Windows Win32K allows an authorized attacker to bypass a security feature locally.
- CVE-2026-69779High
Time-of-check time-of-use (TOCTOU) race condition in Windows Win32K allows an authorized attacker to elevate privileges locally.
- CVE-2026-69762High
Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.
- CVE-2026-69706High
Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network.
- CVE-2026-69689High
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges over a network.
- CVE-2026-69652High
Use-after-free in Windows Win32K allows an authorized attacker to elevate privileges locally.
- CVE-2026-69630High
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.
- CVE-2026-69610High
Buffer over-read in Windows Win32K allows an authorized attacker to elevate privileges locally.
- CVE-2026-69609Medium
An out-of-bounds read vulnerability in Windows Win32K allows an authorized attacker to disclose information locally.
- CVE-2026-69498High
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
- CVE-2026-69410High
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
- CVE-2026-69348High
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
- CVE-2026-69335High
Use-after-free in Windows Win32K allows an authorized attacker to elevate privileges locally.
- CVE-2026-69333High
Use-after-free in Windows Win32K allows an authorized attacker to elevate privileges locally.
- CVE-2026-69301High
Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.
- CVE-2026-69274High
A use-after-free vulnerability in Windows Win32K allows an authorized attacker to elevate privileges over a network.
- CVE-2026-68880High
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network.
- CVE-2026-65776High
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
- CVE-2026-65775High
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
- CVE-2026-65678High
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
- CVE-2026-62885High
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
- CVE-2026-62877High
Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
- CVE-2026-62876High
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.
- CVE-2026-62798Medium
Untrusted pointer dereference in Windows Win32K allows an authorized attacker to disclose information locally.
- CVE-2026-62786Medium
An out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

