CVE-2026-70289

A heap-based buffer overflow vulnerability in the Windows Win32 Kernel Subsystem allows authorized attackers to escalate their privileges locally. This could enable them to execute arbitrary code with elevated permissions, potentially compromising system integrity and security. Organizations using affected Windows systems should prioritize patching this vulnerability to mitigate the risk of unauthorized access and control.