ZDI-26-540: (Pwn2Own) Microsoft Windows win32kfull Use-After-Free Information Disclosure Vulnerability
ZDI discloses CVE-2026-65776, a Pwn2Own win32kfull use-after-free in Windows enabling local information disclosure, CVSS 6.5.
ZDI-26-540 describes a use-after-free vulnerability in Microsoft Windows win32kfull, demonstrated at Pwn2Own, that allows local attackers to disclose sensitive information. Exploitation requires the attacker to first execute low-privileged code on the target system. ZDI assigned a CVSS score of 6.5, tracked as CVE-2026-65776.
- Use-after-free in Microsoft Windows win32kfull
- Local information disclosure requiring prior code execution
- Demonstrated at Pwn2Own, CVSS 6.5, tracked as CVE-2026-65776
Vulnerabilities mentionedAll →
| CVE | Vulnerability | CVSS | EPSS | Flags | Affected | Exposure | Published |
|---|---|---|---|---|---|---|---|
| CVE-2026-65776 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. NVD description · AI analysis pending | 7.0 | <1% |
| — |
This vulnerability allows local attackers to disclose sensitive information on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.5. The following CVEs are assigned: CVE-2026-65776.
This source does not provide full text. Read it at zerodayinitiative.com.