This vulnerability involves a heap-based buffer overflow in the Windows Kernel component of Windows 10 Version 21H2 (build 10.0.19044.0). An attacker with local authorized access can exploit this flaw to elevate their privileges on the affected system. The vulnerability is tracked as CWE-122. Microsoft has published an official fix to remediate this issue.

Successful exploitation allows an authorized local attacker to gain elevated privileges, potentially leading to full system compromise. The vulnerability affects confidentiality, integrity, and availability with high impact as indicated by the CVSS vector (C:H/I:H/A:H). No known exploits in the wild have been reported at this time.

An official fix is available from Microsoft. Users and administrators should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33841 to remediate this vulnerability.