This vulnerability involves a heap-based buffer overflow in the Windows Kernel component of Microsoft Windows Server 2012 (version 6.2.9200.0). It enables an attacker with local authorized access to escalate their privileges on the affected system. The vulnerability is tracked as CWE-122 and has a CVSS v3.1 base score of 7.8, indicating high impact on confidentiality, integrity, and availability. Microsoft has published an official fix for this issue, as referenced in their security update guide.

Successful exploitation allows an authorized local attacker to elevate their privileges, potentially gaining higher-level access to the system. This can lead to full system compromise, affecting confidentiality, integrity, and availability of the affected Windows Server 2012 system.

An official fix is available from Microsoft. Administrators should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35420 to remediate this vulnerability.