Back to vendor advisories
Microsoft Security Response CenterCVE-2026-69610

Windows Win32k Elevation of Privilege Vulnerability

HighVendor CVSS 7.0 / 10 1 CVE Published Sep 8, 2026 at 7:00 AM UTC

Summary

Buffer over-read in Windows Win32K allows an authorized attacker to elevate privileges locally.

Products covered

  • Microsoft Office LTSC for Mac 2021

  • Microsoft Office LTSC for Mac 2024

  • Microsoft Office 365 for Mac

Remediation

Release Notes

Vendor-listed fixes

  • 16.112.26090911

CVEs in this advisory 1

Update history

What changed in later vendor updates

SecurityAlert records field-level changes from the point we begin following a bulletin. Earlier vendor changes may not have a field-by-field record.

    • Added affected products: Microsoft Office 365 for Mac, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024.
    • Removed affected products: Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2 for ARM64-based Systems, Windows 10 Version 21H2 for x64-based Systems, Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2 for....
    • Added fixed versions: 16.112.26090911.
    • Removed fixed versions: 6.2.9200.26349, 6.3.9600.23398, 10.0.14393.9512, 10.0.17763.9245, 10.0.19044.7725.
    • The vendor changed its remediation guidance.
    • Added fixed versions: 6.3.9600.23398.
    • Removed fixed versions: 6.3.9600.23397.

Updates

  1. Published by Microsoft Security Response Center

    The publication date reported by the vendor.

  2. Added to SecurityAlert

    We collected the advisory from the official source.

  3. Confirmed at the source

    Our collector saw this advisory during a later source check.