CVE-2026-62712
Covered in 5 advisories
Radar advisories
- 2026-09-08 ZDI ZDI-26-618: Microsoft Windows UMPDDrvStretchBlt Improper Object Management Local Privilege Escalation Vulnerability Improper object management in UMPDDrvStretchBlt can be leveraged for local privilege escalation.
- 2026-09-08 ZDI ZDI-26-619: Microsoft Windows UMPDDrvStretchBltROP Improper Object Management Local Privilege Escalation Vulnerability The UMPDDrvStretchBltROP driver in Microsoft Windows contains an improper object management flaw that enables local privilege escalation.
- 2026-09-08 ZDI ZDI-26-620: Microsoft Windows UMPDDrvPlgBlt Improper Object Management Local Privilege Escalation Vulnerability Improper object management in the UMPDDrvPlgBlt component can be leveraged for local privilege escalation.
- 2026-09-08 ZDI ZDI-26-621: Microsoft Windows UMPDDrvRealizeBrush Improper Object Management Local Privilege Escalation Vulnerability Improper object management in UMPDDrvRealizeBrush enables local privilege escalation on Windows.
- 2026-08-11 ZDI ZDI-26-542: Microsoft Windows UMPDDrvBitBlt Improper Object Management Local Privilege Escalation Vulnerability Local attackers can exploit an improper object management flaw in UMPDDrvBitBlt to gain higher privileges.
References