Windows Win32k Elevation of Privilege Vulnerability

An attacker with local access to a server or workstation could exploit this vulnerability to gain system-level privileges, allowing them to take complete control of the machine and access, modify, or delete critical operational data.

IT managers operating Windows-based servers and workstations in utility environments, particularly those running Windows Server 2016, 2019, 2022, or 2025, and Windows 10 or 11 systems used for engineering, SCADA, or industrial process monitoring. All system architectures (32-bit, 64-bit, ARM64) are affected.

An attacker must first gain local user-level access to the target Windows system (e.g., through compromised credentials, phishing, or a previous vulnerability). They then trigger the use-after-free condition in the Win32 kernel to escalate their privileges from user to system/administrator level.