Microsoft Windows Win32K - GRFX Integer Overflow Vulnerability Leading to Local Code Execution

Vulnerability

An integer overflow vulnerability has been identified in the Windows Win32K - GRFX component, allowing an unauthorized attacker to execute code locally. This vulnerability requires the user to interact with a specially crafted file using the Windows File Explorer Preview Pane.

Impact

Exploitation of this vulnerability could lead to unauthorized local code execution.

Remediation

Users can apply the security update for this vulnerability, which is available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles linked within the vulnerability reference.

Added: Jun 10, 2026, 1:44 AM
Updated: Jun 10, 2026, 1:44 AM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
7.5
exploitability
3.8
remediation
7.7
relevance
9.6
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.