Unrated
CVE-2026-70117 Windows Win32k Elevation of Privilege Vulnerability
Type: advisorySources: Microsoft security updates
A heap-based buffer overflow in the Windows Win32 Kernel Subsystem could allow an authorized attacker to elevate privileges locally.
- Products
- Windows Win32k
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2026-70117
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 3 Nov 2026, 17:59 UTC · Revision 1
Source evidence
CVE-2026-70117 Windows Win32k Elevation of Privilege Vulnerability
official-microsoft-security-updates · Original sourcePublished 13 Oct 2026, 14:00 UTC
A heap-based buffer overflow in the Windows Win32 Kernel Subsystem could allow an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
Windows Win32k
Fixed versions: Not specified
Complete source record
{
"id": "858d52c6ca5ac68371dffbe7e2cc931f3f7bad03e25435b56da33b7f02035f27",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70117",
"method": "llm",
"payload": {
"kind": "advisory",
"title": "CVE-2026-70117 Windows Win32k Elevation of Privilege Vulnerability",
"summary": "A heap-based buffer overflow in the Windows Win32 Kernel Subsystem could allow an authorized attacker to elevate privileges locally.",
"evidence": "Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.",
"products": [
{
"name": {
"value": "Windows Win32k",
"evidence": "CVE-2026-70117 Windows Win32k Elevation of Privilege Vulnerability"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
}
],
"severity": "unknown",
"fixed_cves": [],
"related_cves": [
{
"value": "CVE-2026-70117",
"evidence": "CVE-2026-70117 Windows Win32k Elevation of Privilege Vulnerability"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "official-microsoft-security-updates",
"document_id": 24852,
"published_at": "2026-10-13T14:00:00+00:00"
}