What is the CVSS score of EUVD-2026-29593?

EUVD-2026-29593 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Windows Win32K are affected by EUVD-2026-29593?

CVE-2026-34333 is a local privilege escalation vulnerability in Windows graphics subsystem affecting Windows 10, 11, and Server 2012+ that allows authenticated users with low privileges to gain…. A patch is available.

Windows Win32K EUVD-2026-29593

| CVE-2026-34333 HIGH

Use After Free (CWE-416)

2026-05-12 microsoft

GHSA-2w3f-wfrh-8q9g

Denial Of Service Use After Free Memory Corruption Microsoft

7.8

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

May 12, 2026 - 18:33 vuln.today

CVE Published

May 12, 2026 - 16:58 nvd

HIGH 7.8

DescriptionNVD

Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

AnalysisAI

Local privilege escalation in Windows Win32K graphics subsystem affects Windows 10 (1607 through 22H2), Windows 11 (all versions including 26H1 preview), and Windows Server 2012 through authenticated low-privileged local users exploiting a use-after-free memory corruption flaw. Microsoft has released security updates addressing this CWE-416 vulnerability with CVSS 7.8 severity. …

RemediationAI

Within 24 hours: Inventory all affected Windows systems (Windows 10 1607-22H2, Windows 11 all versions, Windows Server 2012-2022) and prioritize RDP-exposed and shared terminal servers. Within 7 days: Deploy Microsoft security updates for all affected systems; verify patch installation via Windows Update confirmation or manual version checks. …

Analysis

Detailed AI-generated intelligence summary covering attack vector, impact assessment, affected versions, remediation steps, and indicators of compromise.

POChttps://••••••••••.com/exploit

PATCHhttps://••••••••••.com/patch

ADVISORYhttps://••••••••••.com/advisory

Full analysis requires sign-in

Get intelligence summaries, risk assessment, exploit details, threat intel, and remediation guidance.

More from same product – last 7 days

CVE-2026-40412 CRITICAL Monitor

10.0 May 22

Remote code execution in Microsoft Azure Orbital Spatio allows unauthenticated network attackers to upload dangerous fil

CVE-2026-41104 CRITICAL Monitor

10.0 May 22

Unsafe deserialization in Microsoft Planetary Computer Pro (Geocatalog) lets a remote unauthenticated attacker craft mal

CVE-2026-23652 CRITICAL Monitor

10.0 May 22

Remote code execution in Microsoft Power Pages allows unauthenticated network attackers to inject and execute operating-

CVE-2026-47280 CRITICAL Monitor

10.0 May 22

Privilege elevation in Microsoft Azure Resource Manager (ARM) allows remote unauthenticated attackers to bypass authenti

CVE-2026-42901 CRITICAL Monitor

10.0 May 22

Privilege escalation in Microsoft Entra ID enables remote unauthenticated attackers to bypass origin validation and gain

EUVD-2026-29593 vulnerability details – vuln.today

Back

Windows Win32K EUVD-2026-29593

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

RemediationAI

Full analysis requires sign-in

More from same product – last 7 days

Share

External POC / Exploit Code