CVE-2026-83582

Awaiting Analysis Awaiting Analysis - Queue

Use After Free in Windows Graphics Kernel Information Disclosure

Publication date: 2026-10-13

Last updated on: 2026-10-16

Assigner: Microsoft Corporation

Description

Use after free in Windows Graphics Kernel allows an authorized attacker to disclose information locally.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-13

Last Modified

2026-10-16

Generated

2026-10-19

AI Q&A

2026-10-14

EPSS Evaluated

2026-10-18

NVD

CVE-2026-83582

EUVD

EUVD-2026-99923

Affected Vendors & Products

Vendor	Product	Version / Range
Microsoft	Windows	10 Version 1607 10.0.14393.0
Microsoft	Windows	10 Version 1809 10.0.17763.0
Microsoft	Windows	10 Version 21H2 10.0.19044.0
Microsoft	Windows	10 Version 22H2 10.0.19045.0
Microsoft	Windows	11 version 23H2 10.0.22631.0
Microsoft	Windows	11 Version 23H2 10.0.22631.0
Microsoft	Windows	11 Version 24H2 10.0.26100.0
Microsoft	Windows	11 Version 25H2 10.0.26200.0
Microsoft	Windows	11 version 26H1 10.0.28000.0
Microsoft	Windows	11 Version 26H2 10.0.26300.0
Microsoft	Windows	Server 2012 6.2.9200.0
Microsoft	Windows	Server 2012 (Server Core installation) 6.2.9200.0
Microsoft	Windows	Server 2012 R2 6.3.9600.0
Microsoft	Windows	Server 2012 R2 (Server Core installation) 6.3.9600.0
Microsoft	Windows	Server 2016 10.0.14393.0
Microsoft	Windows	Server 2016 (Server Core installation) 10.0.14393.0
Microsoft	Windows	Server 2019 10.0.17763.0
Microsoft	Windows	Server 2019 (Server Core installation) 10.0.17763.0
Microsoft	Windows	Server 2022 10.0.20348.0
Microsoft	Windows	Server 2025 10.0.26100.0
Microsoft	Windows	Server 2025 (Server Core installation) 10.0.26100.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-416	The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Attack-Flow Graph

Executive Summary

This is a use-after-free vulnerability in the Windows Graphics Kernel. It allows an authorized attacker with local access to exploit memory corruption and potentially disclose sensitive information from the system.

Detection Guidance

Detection typically requires monitoring for unusual system behavior or crashes related to the Windows Graphics Kernel. Check Windows Event Viewer for graphics-related errors or application crashes. Use tools like Process Monitor to track suspicious memory access patterns in win32k.sys or related components.

Impact Analysis

An attacker could exploit this to read sensitive data from memory, such as passwords or encryption keys, if they have local access to the affected Windows system.

Compliance Impact

This vulnerability could lead to unauthorized disclosure of personal or sensitive data, potentially violating GDPR, HIPAA, or other privacy regulations that require protection of such information.

Mitigation Strategies

Apply the latest Windows security updates from Microsoft Update immediately. Disable unnecessary graphics-related services if not required. Restrict local user permissions to reduce attack surface. Monitor for unusual activity in graphics drivers or kernel modules.

Hi! I’m here to help you understand CVE-2026-83582. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70