{"id":"CVE-2026-88073","published":"2026-10-13T19:21:26.010","lastModified":"2026-10-16T16:22:27.390","description":"Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-416"],"vendors":["microsoft"],"products":["windows 10 21h2","windows 10 22h2","windows 11 23h2","windows 11 24h2","windows 11 25h2","windows 11 26h1","windows 11 26h2","windows server 2025"],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88073","tags":["Patch","Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A use-after-free vulnerability in Windows Graphics Kernel allows local attackers with authorized access to elevate their privileges to SYSTEM level. This occurs when freed memory is accessed after being reallocated, potentially leading to arbitrary code execution and complete system compromise.","exploitability":"Exploitation requires a local authenticated user with minimal privileges and is moderately difficult, requiring precise memory manipulation techniques to achieve privilege escalation.","blast_radius":"If exploited, this vulnerability could affect all Windows 10 21H2, 22H2 and Windows 11 23H2, 24H2, 25H2, 26H1, 26H2 systems, potentially allowing attackers to gain full system control from a local account.","remediation":"Deploy the Windows security update KB5040000 or later immediately to all affected systems.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["priv-esc","windows","kernel"],"model":"garnet-coder","analyzedAt":"2026-10-18T10:01:13.252Z"}}