cve 2026 24285

  1. CVE-2026-24285 Win32k Local EoP: Patch Now to Prevent Privilege Escalation

    Microsoft has publicly recorded CVE‑2026‑24285 as a Win32k elevation‑of‑privilege vulnerability that allows a local, authenticated user to escalate to full system privileges; Microsoft’s advisory entry and early aggregator reports indicate a use‑after‑free style bug in the Win32k kernel surface...