{"id":"CVE-2026-122170","kind":"vulnerability","aliases":["CVE-2026-122170"],"related":[],"title":"Windows Win32K: use-after-free lets a local user gain higher privileges","description":"Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.","summary":"A use-after-free bug in the Windows Win32K kernel driver lets an attacker who already has a local account raise their privileges. The sources give no further detail on the exploit path.","severity":"high","cvss":7.0,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","windows"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:20:34+00:00","first_seen_at":"2026-11-10T19:25:10+00:00","triaged_at":"2026-11-10T19:50:16+00:00","updated_at":"2026-11-10T19:50:16+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T19:50:16Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Windows Win32K: use-after-free lets a local user gain higher privileges","impact":"high","summary":"A use-after-free bug in the Windows Win32K kernel driver lets an attacker who already has a local account raise their privileges. The sources give no further detail on the exploit path.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"Local attacker gains elevated system privileges on the Windows machine.","analyst_note":"Find the Microsoft Security Update Guide entry for CVE-2026-122170 to confirm affected Windows builds and the fixed update.","how_to_check":"- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Any Windows machine with a local authenticated user could be affected, since the flaw is in the kernel graphics subsystem. The sources do not say which Windows builds are vulnerable or which fixed versions exist, so the affected build range is unknown.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.00066,"input_tokens":4476,"output_tokens":424,"severity_before":"high"},"analyst_status":"queued","analyst_note":"Find the Microsoft Security Update Guide entry for CVE-2026-122170 to confirm affected Windows builds and the fixed update.","search":"'-122170':16A,19A '-2026':15A,18A 'account':42B 'allow':62C 'alreadi':38B 'attack':36B,65C 'author':64C 'bug':27B 'cve':14A,17A 'detail':51B 'driver':33B 'elev':67C 'exploit':54B 'free':6A,26B,58C 'gain':11A 'give':48B 'higher':12A 'infrastructur':20B 'kernel':32B 'let':7A,34B 'local':9A,41B,69C 'path':55B 'privileg':13A,45B,68C 'rais':43B 'sourc':47B 'use':4A,24B,56C 'use-after-fre':3A,23B 'user':10A 'win32k':2A,31B,61C 'window':1A,21B,30B,60C","nicknames":[],"mitigations":[],"who_affected":"Any Windows machine with a local authenticated user could be affected, since the flaw is in the kernel graphics subsystem. The sources do not say which Windows builds are vulnerable or which fixed versions exist, so the affected build range is unknown.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["high","infrastructure","windows"],"campaign_type":null,"search_a":"'-122170':16A,19A '-2026':15A,18A 'cve':14A,17A 'free':6A 'gain':11A 'higher':12A 'let':7A 'local':9A 'privileg':13A 'use':4A 'use-after-fre':3A 'user':10A 'win32k':2A 'window':1A","search_b":"'account':42B 'alreadi':38B 'attack':36B 'bug':27B 'detail':51B 'driver':33B 'exploit':54B 'free':26B 'give':48B 'infrastructur':20B 'kernel':32B 'let':34B 'local':41B 'path':55B 'privileg':45B 'rais':43B 'sourc':47B 'use':24B 'use-after-fre':23B 'win32k':31B 'window':21B,30B","search_c":"'allow':62C 'attack':65C 'author':64C 'elev':67C 'free':58C 'local':69C 'privileg':68C 'use':56C 'win32k':61C 'window':60C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:20:34+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-122170","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-122170","severity":null,"published_at":"2026-11-10T19:20:34+00:00","modified_at":"2026-11-10T19:20:34+00:00","first_seen_at":"2026-11-10T19:25:10+00:00","fetched_at":"2026-11-10T19:25:10+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}