cve 2026 33840

  1. CVE-2026-33840: Win32k Use-After-Free Local PrivEsc to SYSTEM in Windows 11

    Microsoft disclosed CVE-2026-33840 on May 12, 2026 as an Important Win32k elevation-of-privilege flaw in Windows 11 and Windows Server 2025 that lets a locally authorized attacker exploit a use-after-free bug and gain SYSTEM privileges. The uncomfortable part is not the label “Important,” which...