This vulnerability involves a race condition (CWE-362) in the Windows Win32K GRFX subsystem on Windows 10 Version 1809. Improper synchronization during concurrent execution of shared resources can be exploited by an authorized local attacker to gain elevated privileges. The CVSS 3.1 vector indicates the attack requires local access with high attack complexity and low privileges but no user interaction, impacting confidentiality, integrity, and availability. Microsoft has published an official fix to remediate this vulnerability.

Successful exploitation allows a local attacker with authorized access to elevate their privileges on the affected Windows 10 system, potentially leading to full system compromise. The vulnerability impacts confidentiality, integrity, and availability of the system. There are no known exploits in the wild at this time.

An official patch is available from Microsoft to remediate this vulnerability. Users and administrators should apply the update provided in the Microsoft security advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33839 to protect affected systems. No additional mitigation steps are indicated by the vendor advisory.