CVE-2024-21346
Win32k Elevation of Privilege Vulnerability
CVSS
7.8
High
EPSS
4.1%
p90
KEV
—
Exploit Today
27
0-100
Published: Feb 13, 2024 · Last modified: Aug 10, 2026 · CWE-822
4.1%EPSS · 30 days4.1%
2026-07-162026-08-12
Win32k Elevation of Privilege Vulnerability
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-688107.8 HIG23.5%
——7Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.18hCVE-2026-649107.8 HIG27.6%
——8Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.2dCVE-2026-627985.5 MED24.5%
——7Untrusted pointer dereference in Windows Win32K allows an authorized attacker to disclose information locally.17hCVE-2026-627377.8 HIG27.0%
——8Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.17hCVE-2026-613605.5 MED32.7%
——10Untrusted pointer dereference in Windows GDI allows an authorized attacker to disclose information locally.21hCVE-2026-8917—1.7%
——1Untrusted Pointer Dereference in ASUS GPU Tweak III, GPUTweakII, AI Suite3, and VGAdll: An IOCTL vulnerability allows a local attacker to write a specific value to an arbitrary memory address, potentially leading to privilege escalation.
Refer to the '
Security Update for ASUS GPU Tweak III, GPU Tweak II, AI Suite 3, and Armoury Crate Security Bulletin ' section on the ASUS Security Advisory for more information.2d