Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
Evidence confidence: Insufficient evidence
● Hype ● Reality
Earlier evidence-support scores are retained in history; this chart shows only the current priority definition.
First record: hype 0.8 · reality 2.7 (2026-11-02 15:14). The curve appears once the score changes.
Public exploit entries / repo candidates
Reality is general threat/review priority, combining observed exploitation, CVSS severity and fresh EPSS. Evidence confidence is separate. This is not calibrated risk, a victim count or an asset-specific assessment. A range reflects missing numeric inputs. Published 23 days ago. Exploitation evidence usually takes weeks to show up: a low reality score can mean there is no data yet, not that the flaw is mild.
Score evaluated: 2026-11-05 14:00:28.370038+00:00 · EPSS snapshot: 2026-11-05T12:03:04Z