CVE-2026-32195
Stack-Based Buffer Overflow in Windows Kernel Enables Local Privilege Escalation
Publication date: 2026-04-14
Last updated on: 2026-04-20
Assigner: Microsoft Corporation
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| microsoft | windows_11_26h1 | to 10.0.28000.1836 (exc) |
| microsoft | windows_11_26h1 | to 10.0.28000.1836 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-121 | A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function). |
Attack-Flow Graph
AI Powered Q&A
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
This vulnerability allows an authorized attacker to elevate privileges locally through a stack-based buffer overflow in the Windows Kernel.
Elevation of privilege vulnerabilities can potentially lead to unauthorized access or modification of sensitive data, which may impact compliance with standards and regulations such as GDPR and HIPAA that require protection of data confidentiality and integrity.
However, the provided information does not specify direct effects or assessments related to compliance with these standards.
Can you explain this vulnerability to me?
This vulnerability is a stack-based buffer overflow in the Windows Kernel. It allows an authorized attacker to elevate their privileges locally on the affected system.
How can this vulnerability impact me? :
An attacker exploiting this vulnerability can gain higher privileges on the system than they are normally authorized to have. This can lead to full control over the affected system, allowing them to execute arbitrary code, access sensitive information, or disrupt system operations.
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, apply the security updates provided by Microsoft as soon as possible to fix the stack-based buffer overflow in the Windows Kernel.
Since the vulnerability allows local privilege escalation, ensure that only trusted users have local access to systems until the patch is applied.