Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

Summary

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

Remediation

1. Inventory every Microsoft Windows 10 1607 deployment, including staging.
2. Upgrade Microsoft Windows 10 1607 to the fixed version for your release line, listed under Affected versions.
3. Confirm the running version after the upgrade.

References

• Advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85908