This vulnerability (CVE-2026-33839) involves a race condition (CWE-362) in the Windows Win32K graphics subsystem (GRFX) in Windows 10 Version 1809 (build 10.0.17763.0). Improper synchronization during concurrent execution of shared resources can be exploited by an authorized local attacker to elevate privileges. The CVSS 3.1 base score is 7.0, indicating high severity, with attack vector local, high attack complexity, low privileges required, no user interaction, and impacts on confidentiality, integrity, and availability. Microsoft has published an official fix for this vulnerability.

An authorized local attacker can exploit this race condition to elevate privileges on the affected Windows 10 Version 1809 system. This could lead to full system compromise, including unauthorized access to sensitive data and the ability to execute code with elevated rights. The vulnerability affects confidentiality, integrity, and availability of the system.

Microsoft has released an official fix for this vulnerability. It is recommended to apply the security update provided by Microsoft as detailed in their advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33839. No additional mitigation steps are indicated beyond applying the official patch.