CVE-2026-54986

A heap-based buffer overflow vulnerability in Windows Win32K allows authorized attackers to escalate their privileges locally, potentially gaining unauthorized access to sensitive system resources. Organizations using affected Windows versions should prioritize patching this vulnerability to mitigate the risk of exploitation, particularly those with environments that allow user-level access to untrusted applications.