Product:
Windows Win32K
Summary
A use after free vulnerability in Windows Win32K allows an authorized attacker to elevate privileges locally. This can lead to unauthorized access and control over the affected system. The vulnerability poses a significant risk due to its high impact on confidentiality, integrity, and availability.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2026-20920 |
Exploitation
To exploit this vulnerability, an attacker must have local access to the system and can leverage the use after free condition to execute arbitrary code with elevated privileges. This requires low complexity and no user interaction, making it easier for attackers to gain control over the system.
Affected Products
- Windows Win32K – Affected by the use after free vulnerability allowing privilege escalation.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Microsoft. Regularly updating systems and monitoring for unusual activity can also help reduce the risk of exploitation.