Description
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
Published: 2026-08-11
Score: 7 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A use‑after‑free flaw in the Windows Win32K subsystem can allow a local, authorized attacker to raise their privileges. The flaw is a memory corruption bug (CWE‑416) that, when triggered, grants the attacker elevated rights and the ability to execute arbitrary code with higher privileges, potentially leading to full system compromise.

Affected Systems

Microsoft Windows 11 24H2, Windows 11 25H2, Windows 11 26H1 and Windows Server 2025 including the Server Core installation are affected. Users running these operating system releases should verify their build version against the list supplied by Microsoft.

Risk and Exploitability

The CVSS score of 7 indicates the vulnerability is considered high severity. EPSS data is not available and the issue is not listed in the CISA KEV catalog, suggesting that a public exploit has not yet been observed. The likely attack vector is local; an attacker who can run code in an authenticated session with user privileges can trigger the use‑after‑free to elevate their powers.

Generated by OpenCVE AI on August 12, 2026 at 13:55 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the security update released by Microsoft that addresses CVE‑2026‑65776
  • Restrict users to least‑privilege accounts to limit the impact of successful privilege escalation attempts
  • Monitor logs for abnormal privilege‑escalation activity to detect potential exploitation

Generated by OpenCVE AI on August 12, 2026 at 13:55 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 14 Aug 2026 13:00:00 +0000

Type Values Removed Values Added
First Time appeared Microsoft windows Server 2025 (server Core Installation)
Vendors & Products Microsoft windows Server 2025 (server Core Installation)

Thu, 13 Aug 2026 17:15:00 +0000

Type Values Removed Values Added
First Time appeared Microsoft windows 11 24h2
Microsoft windows 11 25h2
Microsoft windows 11 26h1
CPEs cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*
cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:*
cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:arm64:*
cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:x64:*
Vendors & Products Microsoft windows 11 24h2
Microsoft windows 11 25h2
Microsoft windows 11 26h1

Wed, 12 Aug 2026 15:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 11 Aug 2026 17:15:00 +0000

Type Values Removed Values Added
Description Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
Title Windows Win32k Elevation of Privilege Vulnerability
First Time appeared Microsoft
Microsoft windows 11 24h2
Microsoft windows 11 25h2
Microsoft windows 11 26h1
Microsoft windows Server 2025
Weaknesses CWE-416
CPEs cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*
cpe:2.3:o:microsoft:windows_11_25H2:*:*:*:*:*:*:arm64:*
cpe:2.3:o:microsoft:windows_11_26H1:*:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*
Vendors & Products Microsoft
Microsoft windows 11 24h2
Microsoft windows 11 25h2
Microsoft windows 11 26h1
Microsoft windows Server 2025
References
Metrics cvssV3_1

{'score': 7, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C'}

Subscriptions

Microsoft Windows 11 24h2 Windows 11 24h2 Windows 11 25h2 Windows 11 25h2 Windows 11 26h1 Windows 11 26h1 Windows Server 2025 Windows Server 2025 (server Core Installation)
cve-icon MITRE

Status: PUBLISHED

Assigner: microsoft

Published:

Updated: 2026-08-31T20:08:25.406Z

Reserved: 2026-07-22T21:30:09.119Z

Link: CVE-2026-65776

cve-icon Vulnrichment

Updated: 2026-08-12T13:46:32.895Z

cve-icon NVD

Status : Analyzed

Published: 2026-08-11T17:18:56.920

Modified: 2026-08-13T17:09:32.270

Link: CVE-2026-65776

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-14T12:31:05Z

Weaknesses