windows local privilege escalation

Windows local privilege escalation vulnerabilities allow an attacker with limited user access to gain higher-level privileges, such as SYSTEM, on a Windows system. These flaws often reside in core components like the Win32k kernel driver and are rated Important by Microsoft. A recent example is CVE-2026-35417, a type confusion bug in the Win32K ICOMP component that enables local elevation of privilege. Such vulnerabilities are not remotely exploitable but are critical after an attacker gains an initial foothold. Discussions on WindowsForum cover the technical details, affected versions, and urgency of patching these issues, emphasizing that even non-zero-day bugs can pose significant risks in post-exploitation scenarios.