win32k grfx

Microsoft disclosed CVE-2026-40403 on May 12, 2026, as a critical Windows Graphics Component remote code execution vulnerability in Win32K-GRFX, caused by a heap-based buffer overflow that could let a low-privileged authenticated attacker escape a contained local environment such as a guest...

Microsoft disclosed CVE-2026-34330 on May 12, 2026, as an Important-rated Windows Win32k elevation-of-privilege flaw in the GRFX component that can let a locally authenticated attacker gain SYSTEM privileges after exploiting an integer overflow or wraparound weakness. The advisory is not...

Microsoft disclosed CVE-2026-33839 on May 12, 2026, as an Important-rated Windows Win32k elevation-of-privilege vulnerability in the GRFX component, caused by a race condition that lets a low-privileged, locally authenticated attacker potentially gain SYSTEM privileges after installing the...

Microsoft has confirmed CVE-2025-53132 — a race‑condition elevation‑of‑privilege vulnerability in the Windows Win32k – GRFX component — and administrators must treat affected hosts as high‑priority patch targets while applying layered mitigations to reduce immediate risk. Background Windows’...