PT-2026-58631 · Microsoft · Win32K+1

CVE-2026-57095 · Published 2026-07-14 · Updated 2026-07-15

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Windows Win32K (affected versions not specified)

Description Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an unauthorized attacker to elevate privileges locally. This issue enables attackers to gain higher-level permissions on the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2026-57095

Affected Products

Win32K

Windows

References · 5

• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2026-57095 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-57095 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57095 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-57095 · Security Note
• https://twitter.com/windowsforum/status/2077484154422231158 · Twitter Post