ZDI-26-179 HIGH 8.8 Published Mar 10, 2026

Microsoft Windows win32kfull Improper Locking Local Privilege Escalation Vulnerability

Microsoft

CVE-2026-23668 is a high-severity privilege escalation vulnerability in Microsoft Windows that allows local attackers to gain elevated system privileges if they can first execute low-privileged code on a target machine. An attacker exploiting this flaw could escalate from a limited user account to administrator-level access, potentially enabling them to install malware, steal data, or compromise the entire system. Security teams should prioritize patching affected Windows installations immediately and restrict code execution capabilities on systems where patching is delayed.

Related CVEs

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy