ZDI-26-081
HIGH 8.8
Published
Feb 12, 2026
Microsoft Windows win32kfull Use-After-Free Local Privilege Escalation Vulnerability
Microsoft
A local privilege escalation vulnerability in Microsoft Windows (CVE-2026-21235) allows attackers with low-level code execution capabilities to gain elevated system permissions. While the attacker must already have initial access to the target system, successfully exploiting this high-severity flaw could grant them complete control. Security teams should prioritize patching Windows systems and implementing application whitelisting or code execution controls to prevent low-privileged processes from running untrusted code in the first place.