Microsoft Windows Server 2012
cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*
A race condition vulnerability has been identified in the Windows Win32K graphics component, allowing an authorized attacker to elevate privileges locally. This issue arises from improper synchronization in concurrent execution using shared resources.
Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain SYSTEM privileges.
Users can apply the security update for this vulnerability, which is included in the May 2026 Monthly Rollup for various Windows versions. Instructions for downloading this update are available on the Microsoft Update Catalog.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.