ZDI-26-619: Microsoft Windows UMPDDrvStretchBltROP Improper Object Management Local Privilege Escalation Vulnerability
ZDI disclosed CVE-2026-62712, a CVSS 7.8 improper object management flaw in Windows UMPDDrvStretchBltROP enabling local privilege escalation from low-privileged code.
The Zero Day Initiative published ZDI-26-619 covering a local privilege escalation vulnerability in Microsoft Windows' UMPDDrvStretchBltROP function, stemming from improper object management. Exploitation requires that the attacker first obtain the ability to run low-privileged code on the target system. ZDI rated the issue CVSS 7.8 and assigned CVE-2026-62712, the same identifier listed in the companion UMPDDrvRealizeBrush advisory.
- ZDI-26-619 details an improper object management flaw in Windows UMPDDrvStretchBltROP
- Successful exploitation escalates local privileges on affected Windows systems
- Low-privileged code execution is required before exploitation
- CVSS 7.8; tracked as CVE-2026-62712 alongside a related UMPDDrv advisory
- CVEs
- CVE-2026-62712
- Vendors
- MicrosoftZero Day Initiative
- Products
- Windows
- Organizations
- Zero Day Initiative
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-62712 | Heap Buffer Overflow in Windows Win32K Enables Local Privilege Escalation | 7.8 | <1% |
From the original article
This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.
zerodayinitiative.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.