Heap-based buffer overflow in Windows Win32K - GRFX allows an unauthorized attacker to execute code locally.
2025-05-13T17:16:01.903
2025-05-19T18:31:38.407
Analyzed
CVSSv3.1: 7.8 (HIGH)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | microsoft | office | < 16.0.14326.22502 | Yes |
| Application | microsoft | office | < 16.0.18827.20000 | Yes |
| Application | microsoft | office_long_term_servicing_channel | 2021 | Yes |
| Application | microsoft | office_long_term_servicing_channel | 2024 | Yes |
| Operating System | microsoft | windows_10_1507 | < 10.0.10240.21014 | Yes |
| Operating System | microsoft | windows_10_1607 | < 10.0.14393.8066 | Yes |
| Operating System | microsoft | windows_10_1809 | < 10.0.17763.7314 | Yes |
| Operating System | microsoft | windows_10_1809 | < 10.0.17763.7314 | Yes |
| Operating System | microsoft | windows_10_21h2 | < 10.0.19044.5854 | Yes |
| Operating System | microsoft | windows_10_22h2 | < 10.0.19045.5854 | Yes |
| Operating System | microsoft | windows_11_22h2 | < 10.0.22621.5335 | Yes |
| Operating System | microsoft | windows_11_23h2 | < 10.0.22631.5335 | Yes |
| Operating System | microsoft | windows_11_24h2 | < 10.0.26100.4061 | Yes |
| Operating System | microsoft | windows_server_2008 | - | Yes |
| Operating System | microsoft | windows_server_2008 | r2 | Yes |
| Operating System | microsoft | windows_server_2012 | - | Yes |
| Operating System | microsoft | windows_server_2016 | < 10.0.14393.8066 | Yes |
| Operating System | microsoft | windows_server_2019 | < 10.0.17763.7314 | Yes |
| Operating System | microsoft | windows_server_2022 | < 10.0.20348.3692 | Yes |
| Operating System | microsoft | windows_server_2022_23h2 | < 10.0.25398.1611 | Yes |
| Operating System | microsoft | windows_server_2025 | < 10.0.26100.4061 | Yes |