CVE-2026-62798

Published: Aug 11, 2026Modified: Aug 13, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: secure@microsoft.com (Secondary)

Description

Untrusted pointer dereference in Windows Win32K allows an authorized attacker to disclose information locally.

Affected (9)

Products: Microsoft: Windows 11 23h2, Windows 11 24h2, Windows 11 25h2, Windows 11 26h1, Windows Server 2025

5 products

Windows 11 23h2

Windows 11 24h2

Windows 11 25h2

Windows 11 26h1

Windows Server 2025

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Microsoft Windows 11 23h2	Before 10.0.22631.7517
Microsoft Windows 11 23h2	Before 10.0.22631.7517
Microsoft Windows 11 24h2	Before 10.0.26100.9106
Microsoft Windows 11 24h2	Before 10.0.26100.9106
Microsoft Windows 11 25h2	Before 10.0.26200.9106
Microsoft Windows 11 25h2	Before 10.0.26200.9106
Microsoft Windows 11 26h1	Before 10.0.28000.2704
Microsoft Windows 11 26h1	Before 10.0.28000.2704
Microsoft Windows Server 2025	Before 10.0.26100.33222

Related CWEs

Untrusted Pointer Dereference

The product obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.

References (1)

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62798

Source: secure@microsoft.com

PatchVendor Advisory

Timeline

No history available yet.