This vulnerability involves a heap-based buffer overflow in the Microsoft Graphics Component within Windows 11 Version 24H2 (build 10.0.26100.0). An attacker with local access and no privileges can exploit this flaw to execute arbitrary code, potentially leading to full system compromise. The CVSS 3.1 vector indicates low attack complexity, no required privileges or user interaction, and high impact on confidentiality, integrity, and availability. Microsoft has published an official patch to remediate this vulnerability.

Successful exploitation allows an unauthorized local attacker to execute arbitrary code with potential full control over the affected system. This can lead to complete compromise of confidentiality, integrity, and availability of the system. No known exploits are currently reported in the wild.

An official fix is available from Microsoft. It is strongly recommended to apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32221 to remediate this vulnerability. No additional mitigation steps are indicated by the vendor.