Win32k Elevation of Privilege Vulnerability

A flaw in Windows' graphical interface component (Win32k) allows a local attacker to gain higher system privileges. An attacker with standard user access can exploit this to run commands with administrator rights.

A privilege escalation vulnerability in the Win32k kernel module allows a local, authenticated attacker to execute arbitrary code with elevated SYSTEM privileges. Exploitation requires user-mode interaction with a specially crafted input to the graphics subsystem; the vulnerability does not require authentication bypass but operates on already-logged-in user contexts.