CVE-2026-21239CWE-122

Windows Kernel Elevation of Privilege Vulnerability

High · published February 10, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
37.7
In the wild
Unconfirmed
What it is

⚡ A heap-based buffer overflow in the Windows Kernel is like a sneaky intruder getting a VIP upgrade to the main event — once they’re in, they can take control! 🔥 Think of the Windows Kernel as a secure party where only a few guests are allowed backstage. This vulnerability lets an authorized guest sneak past security and gain access to areas they shouldn’t be in, potentially wreaking havoc. If exploited, an attacker could elevate their privileges to a level that allows them to manipulate system settings, access sensitive data, or even install malicious software. This could lead to unauthorized control over the entire system, making it a significant threat.

Put simply

Think of the Windows Kernel as a secure party where only a few guests are allowed backstage. This vulnerability lets an authorized guest sneak past security and gain access to areas they shouldn’t be in, potentially wreaking havoc. This vulnerability enables a local attacker with authorized access to exploit a heap-based buffer overflow in the Windows Kernel, allowing them to gain elevated privileges and perform unauthorized actions.

What to do

If exploited, an attacker could elevate their privileges to a level that allows them to manipulate system settings, access sensitive data, or even install malicious software. This could lead to unauthorized control over the entire system, making it a significant threat. To protect against this, ensure that your systems are updated to the latest version where this issue is patched. Regularly review user permissions and limit administrative privileges where possible to minimize risk. You've got this! Stay vigilant and follow these steps to keep your system safe. 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00445 · 37.7th percentile
Weakness
CWE-122 · Heap-based Buffer Overflow
Published
2026-02-10T17:51Z
EPSS history
Timeline
  • 10 FEB 17:51Z
    Windows Kernel Elevation of Privilege Vulnerability
    cvelistv5