CVE-2026-62712
ZDI-26-621: Microsoft Windows UMPDDrvRealizeBrush Improper Object Management Local Privilege Escalation Vulnerability
Published Aug 11, 2026 · updated Oct 14, 2026 · microsoft windows 10 1607
This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-62712.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Sep 8, 2026 · Catalog
Detected
This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-62712.
Oct 14, 2026 · NIST NVD
Updated
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
Affected
- cpe microsoft/windows 10 1607version unspecified
- cpe microsoft/windows 10 1809version unspecified
- cpe microsoft/windows 10 21h2version unspecified
- cpe microsoft/windows 10 22h2version unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-62712
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2026-62712
30-day exploitation probability 0.3%
first.org - NIST NVDVulnerability recordCVE-2026-62712
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
nvd.nist.gov - Zero Day InitiativeCoordinated disclosureZDI-26-618
This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-62712.
zerodayinitiative.com - Zero Day InitiativeCoordinated disclosureZDI-26-619
This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-62712.
zerodayinitiative.com - Zero Day InitiativeCoordinated disclosureZDI-26-620
This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-62712.
zerodayinitiative.com - Zero Day InitiativeCoordinated disclosureZDI-26-621
This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-62712.
zerodayinitiative.com