Igor Soumenkov

The issue is caused by a buffer overflow in the memory of the Win32k component (Win32k.sys) in Windows operating systems. This can allow an attacker to execute arbitrary code using a specially crafted application. The vulnerability exists due to Windows improperly handling calls to Win32k.sys, which can lead to an elevation of privilege.

The issue is related to errors in handling objects in memory by the Windows kernel, which can allow an attacker to elevate their privileges and execute arbitrary code using a specially crafted application. This affects various Windows versions, including Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, and Windows 10 Servers. An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory.