CVE-2026-62712

Think of CVE-2026-62712 as a “backdoor that only works from inside the building.” If someone already has an account on your Windows machine, they may be able to trigger a bug in the graphics part of Windows so the system grants them administrator-level power. That can let them take control of the device, including installing harmful software or disabling defenses.

This matters if your business runs Windows 10, Windows 11, or Windows Server (2012, 2012 R2, 2016, 2019, 2022, 2025) machines. The risk is specifically for a local, authenticated user (someone who already has a login on the machine); it doesn’t require interacting with the user in the UI. Because it’s reachable in a default configuration, you should assume any local account that you don’t tightly trust is a potential risk path.

This is RED priority because a local attacker with an account can potentially elevate to administrator control by triggering a kernel memory flaw, which is the kind of access that enables full compromise. Even though no confirmed KEV listing and no dated public incident are provided here, the vulnerability is present in widely used Windows versions and patch availability is clear—so you should treat it as urgent to reduce exposure on systems with any untrusted local logins.