CVE-2026-88073

Summary

A use-after-free vulnerability in Windows Graphics Kernel allows local attackers with authorized access to elevate their privileges to SYSTEM level. This occurs when freed memory is accessed after being reallocated, potentially leading to arbitrary code execution and complete system compromise.

Exploitability

Exploitation requires a local authenticated user with minimal privileges and is moderately difficult, requiring precise memory manipulation techniques to achieve privilege escalation.

Blast radius

If exploited, this vulnerability could affect all Windows 10 21H2, 22H2 and Windows 11 23H2, 24H2, 25H2, 26H1, 26H2 systems, potentially allowing attackers to gain full system control from a local account.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Deploy the Windows security update KB5040000 or later immediately to all affected systems.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.