CVE-2026-62788

This is a flaw in the Windows core “kernel” (the part that enforces permissions and controls the computer). If someone already has local access to your machine, the bug could help them escape those limits and gain higher privileges, like getting administrator-level control.

This matters if you run Windows 11 or Windows Server 2025, especially on devices where an attacker could get some kind of local access (for example, a user account or other legitimate way to reach the machine). The exposure is mainly a risk when an attacker is already on the system (“authorized attacker” in the findings), not from a simple remote drive-by. Patch accordingly because the fixed updates are available for both affected products.

This is a RED-level issue because it’s a kernel privilege-escalation bug (use-after-free) that can turn local access into higher control. The findings also indicate new press attention tied to patch activity and a named actor (Lazarus group), and while no public exploit code is on record and it’s not in CISA KEV, you should still patch promptly since the vulnerability is fixed and attackers with local access are the scenario to guard against.