Feb 2026: Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2026-21235 Published on February 10, 2026

Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

Vendor Advisory NVD

Weakness Type

What is a Dangling pointer Vulnerability?

Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code.

CVE-2026-21235 has been classified to as a Dangling pointer vulnerability or weakness.


Products Associated with CVE-2026-21235

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2026-21235 are published in these products:

 
 
 
 
 
 
 
 

Affected Versions

Microsoft Windows 10 Version 1809: Microsoft Windows Server 2019: Microsoft Windows Server 2019 (Server Core installation): Microsoft Windows Server 2022: Microsoft Windows 10 Version 21H2: Microsoft Windows 10 Version 22H2: Microsoft Windows 11 version 22H3: Microsoft Windows 11 Version 23H2: Microsoft Windows 10 Version 1607: Microsoft Windows Server 2016: Microsoft Windows Server 2016 (Server Core installation): Microsoft Windows Server 2012: Microsoft Windows Server 2012 (Server Core installation): Microsoft Windows Server 2012 R2: Microsoft Windows Server 2012 R2 (Server Core installation): Microsoft Windows 11 version 26H1: Microsoft Windows 11 Version 26H1: