CVE-2026-69467: CWE-121: Stack-based Buffer Overflow in Microsoft Windows 10 Version 21H2

This vulnerability is a stack-based buffer overflow in the Microsoft Graphics Component on Windows 10 Version 21H2. It permits an authorized attacker with local access to escalate privileges on the affected system. The flaw affects specific Windows 10 builds starting from 10.0.19044.0 up to but not including 10.0.19044.7725, 10.0.19045.0 up to 10.0.19045.7725, 10.0.22631.0 up to 10.0.22631.7582, 10.0.26100.0 up to 10.0.26100.9445, 10.0.26200.0 up to 10.0.26200.9445, and 10.0.28000.0 up to 10.0.28000.2954. Microsoft has published an official security update to remediate this vulnerability.

Successful exploitation allows an authorized local attacker to elevate privileges, potentially gaining higher system rights. This can lead to full system compromise, including confidentiality, integrity, and availability impacts as indicated by the CVSS vector (C:H/I:H/A:H). There are no reports of active exploitation in the wild.

An official fix is available from Microsoft. Users and administrators should apply the security updates provided by Microsoft for the affected Windows 10 versions to remediate this vulnerability. No additional mitigation actions are required beyond applying the official patch.