Microsoft Windows Win32K Graphics Component Heap-Based Buffer Overflow Vulnerability Allowing Local Code Execution

Vulnerability

A heap-based buffer overflow vulnerability has been identified in the Windows Win32K graphics component. This vulnerability allows an authorized attacker to execute code locally. The issue arises from improper handling of memory, which can be exploited to overwrite adjacent memory and potentially execute arbitrary code.

Impact

Exploitation of this vulnerability could lead to unauthorized code execution on the affected system.

Remediation

Users can apply the security update for this vulnerability, which is available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5089548, KB5089549, KB5087420, KB5087538, and KB5087471.

Added: May 12, 2026, 7:33 PM
Updated: May 12, 2026, 7:33 PM

Vulnerability Rating

Custom Algorithm
spread
8.4
impact
7.5
exploitability
2.7
remediation
7.7
relevance
8.1
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.