Microsoft Windows Win32K Privilege Escalation Vulnerability

Vulnerability

A use-after-free vulnerability has been identified in the Windows Win32K component, specifically within ICOMP. This vulnerability allows an authorized attacker to elevate privileges locally. The issue arises from improper memory management, leading to a use-after-free condition that can be exploited to gain higher privileges on the system.

Impact

Exploitation of this vulnerability could allow an attacker to gain SYSTEM privileges.

Remediation

Users can apply the security update for this vulnerability. Instructions for downloading the security update are available on the Microsoft Update Catalog. Specific knowledge base articles related to this update can also be found on the Microsoft Support website.

Added: Jan 13, 2026, 7:30 PM
Updated: Jan 13, 2026, 7:30 PM

Vulnerability Rating

Custom Algorithm
spread
8.4
impact
7.5
exploitability
3.3
remediation
7.7
relevance
2.0
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.