Local privilege escalation via Win32K heap overflow

A heap-based buffer overflow in Microsoft Windows Win32K allows local users with existing access to elevate privileges on affected systems. Microsoft identifies the affected locus only as Win32K and has not disclosed the specific routine or operation that mishandles attacker-controlled data on the heap. Exploitation requires low-privilege local access and no user interaction, and successful exploitation elevates the user's privileges on the affected host.