Windows Win32k Elevation of Privilege Vulnerability
🔗 CVE IDs covered (1)
📋 Description
Out-of-bounds read in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
🎯 Affected products31
- Microsoft Office 365 for Mac
- Microsoft Office LTSC for Mac 2021
- Microsoft Office LTSC for Mac 2024
- Microsoft Office for Android
- Windows 10 Version 1607 for 32-bit Systems
- Windows 10 Version 1607 for x64-based Systems
- Windows 10 Version 1809 for 32-bit Systems
- Windows 10 Version 1809 for x64-based Systems
- Windows 10 Version 21H2 for 32-bit Systems
- Windows 10 Version 21H2 for ARM64-based Systems
- Windows 10 Version 21H2 for x64-based Systems
- Windows 10 Version 22H2 for 32-bit Systems
- Windows 10 Version 22H2 for ARM64-based Systems
- Windows 10 Version 22H2 for x64-based Systems
- Windows 11 Version 24H2 for ARM64-based Systems
- Windows 11 Version 24H2 for x64-based Systems
- Windows 11 Version 25H2 for ARM64-based Systems
- Windows 11 Version 25H2 for x64-based Systems
- Windows 11 Version 26H1 for ARM64-based Systems
- Windows 11 version 26H1 for x64-based Systems
- Windows Server 2012
- Windows Server 2012 (Server Core installation)
- Windows Server 2012 R2
- Windows Server 2012 R2 (Server Core installation)
- Windows Server 2016
- Windows Server 2016 (Server Core installation)
- Windows Server 2019
- Windows Server 2019 (Server Core installation)
- Windows Server 2022
- Windows Server 2025
- +1 more not shown
✅ Remediation
KB5099538 (Security Update) — fixed build 10.0.17763.9020 KB5099540 (Security Update) — fixed build 10.0.20348.5386 KB5099539 (Security Update) — fixed build 10.0.19044.7548 KB5099539 (Security Update) — fixed build 10.0.19045.7548 KB5099536 (Security Update) — fixed build 10.0.26100.33158 KB5101650 (Security Update) — fixed build 10.0.26200.8875 KB5101650 (Security Update) — fixed build 10.0.26100.8875 KB5101649 (Security Update) — fixed build 10.0.28000.2525 KB5099535 (Security Update) — fixed build 10.0.14393.9339 KB5099445 (Monthly Rollup) — fixed build 6.2.9200.26226 KB5099444 (Monthly Rollup) — fixed build 6.3.9600.23291 KBRelease Notes (Security Update) — fixed build 16.111.26071215 KBRelease Notes (Security Update) — fixed build 16.0.20228.20042
🔗 References (23)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56176
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538
- referencehttps://support.microsoft.com/help/5099538
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540
- referencehttps://support.microsoft.com/help/5099540
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539
- referencehttps://support.microsoft.com/help/5099539
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536
- referencehttps://support.microsoft.com/help/5099536
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650
- referencehttps://support.microsoft.com/help/5101650
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649
- referencehttps://support.microsoft.com/help/5101649
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535
- referencehttps://support.microsoft.com/help/5099535
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445
- referencehttps://support.microsoft.com/help/5099445
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444
- referencehttps://support.microsoft.com/help/5099444
- patchhttps://go.microsoft.com/fwlink/p/?linkid=831049
- patchhttps://play.google.com/store/apps/details?id=com.microsoft.office.officehubrow
- referencehttps://support.google.com/googleplay/answer/113412?hl=en
- patchhttps://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c