CVE-2026-21235CWE-416

Windows Graphics Component Elevation of Privilege Vulnerability

High · published February 10, 2026

CVSS v3.1
7.3
EPSS
1%
Percentile
54.1
In the wild
Unconfirmed
What it is

⚡ A cunning local privilege escalation vulnerability lurks in the Microsoft Graphics Component! An authorized attacker can leverage a use-after-free condition to take control. 🔥 Think of it like a restaurant where an overly friendly diner manages to slip into the kitchen after being served! They could manipulate the chef's orders or even alter the menu, causing chaos in the dining experience. If exploited, this vulnerability could allow an attacker to gain unauthorized access to sensitive system functions, essentially becoming the head chef when they should only have been a customer. This could lead to data breaches, unauthorized installations, or the ability to run malicious applications.

Put simply

Think of it like a restaurant where an overly friendly diner manages to slip into the kitchen after being served! They could manipulate the chef's orders or even alter the menu, causing chaos in the dining experience. This use-after-free vulnerability in the Microsoft Graphics Component occurs when an object is deleted but still referenced by a pointer, enabling attackers to execute code with elevated privileges on the system.

What to do

If exploited, this vulnerability could allow an attacker to gain unauthorized access to sensitive system functions, essentially becoming the head chef when they should only have been a customer. This could lead to data breaches, unauthorized installations, or the ability to run malicious applications. To mitigate this issue, ensure your Microsoft system is updated to the latest security patches available. Regularly check for updates and review user permissions to limit access only to trusted individuals. You've got this! Stay vigilant and keep your systems secure with timely updates! 🛡️

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00740 · 54.1th percentile
Weakness
CWE-416 · Use After Free
Published
2026-02-10T17:51Z
EPSS history
Timeline
  • 10 FEB 17:51Z
    Windows Graphics Component Elevation of Privilege Vulnerability
    cvelistv5