ZDI-26-081 HIGH 8.8 Published Feb 12, 2026

Microsoft Windows win32kfull Use-After-Free Local Privilege Escalation Vulnerability

Microsoft

A local privilege escalation vulnerability in Microsoft Windows (CVE-2026-21235) allows attackers with low-level code execution capabilities to gain elevated system permissions. While the attacker must already have initial access to the target system, successfully exploiting this high-severity flaw could grant them complete control. Security teams should prioritize patching Windows systems and implementing application whitelisting or code execution controls to prevent low-privileged processes from running untrusted code in the first place.

Related CVEs

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy