This vulnerability (CVE-2026-35420) involves a heap-based buffer overflow in the Windows Kernel component of Microsoft Windows Server 2012 (version 6.2.9200.0). It enables a local attacker with authorized access to escalate privileges, potentially gaining higher-level control over the system. The vulnerability has been assigned a CVSS v3.1 base score of 7.8, indicating high severity. Microsoft has published an official fix to remediate this issue, as detailed in their security advisory.

Successful exploitation of this vulnerability allows an authorized local attacker to elevate their privileges, potentially leading to full system compromise. The impact includes complete confidentiality, integrity, and availability loss on the affected system due to the high CVSS impact metrics (C:H/I:H/A:H). There are no known exploits in the wild at this time.

An official fix is available from Microsoft for this vulnerability. Administrators should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35420 to remediate the issue. No additional mitigation steps are specified or required beyond applying the official patch.