Microsoft Windows Win32K GRFX Privilege Escalation Vulnerability

Vulnerability

A race condition vulnerability has been identified in the Windows Win32K - GRFX component, allowing an authorized attacker to elevate privileges over a network. This vulnerability arises from improper synchronization in concurrent execution using shared resources.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain SYSTEM privileges.

Remediation

Users can apply the security update KB5063871 or KB5063889, available through the Microsoft Update Catalog, to address this vulnerability. For Windows Server 2022, the security update KB5063899 is recommended.

Added: Sep 1, 2025, 7:22 PM
Updated: Sep 1, 2025, 7:22 PM

Vulnerability Rating

Custom Algorithm
spread
8.4
impact
7.5
exploitability
2.9
remediation
7.7
relevance
0.3
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.