CVE-2026-70117
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk28th percentile - higher than 28% of all known CVEs
Summary
Heap-based buffer overflow in the Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with valid credentials can gain higher privileges on the system, potentially leading to full compromise of the workstation or server.
Recommendation
Apply Microsoft security updates for the Win32 Kernel Subsystem as soon as possible and restrict local access to trusted users.
Other vulnerabilities in Windows Win32 Kernel Subsystem
See all- CVE-2025-24983HighActively exploited
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- CVE-2022-41113High
Vulnerability in the Windows Win32 Kernel Subsystem allows elevation of privilege. An attacker could exploit it to gain higher privileges on the system.
- CVE-2026-96853Medium
Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
- CVE-2026-96848Medium
Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
- CVE-2026-96249High
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- CVE-2026-85858High
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- CVE-2026-85804High
A use after free in the Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- CVE-2026-85802High
A use after free in the Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- CVE-2026-83909Medium
Exposure of sensitive system information to an unauthorized control sphere in the Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
- CVE-2026-83901High
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS