---
id: "CVE-2026-105021"
page: "https://infrastack.ai/live/CVE-2026-105021"
kind: "vulnerability"
aliases: ["CVE-2026-105021"]
title: "Windows: heap overflow in graphics platform lets a local user gain privileges"
severity: "high"
cvss: 8.8
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: [{"name": "Windows Advanced Rasterization Platform", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["infrastructure", "windows"]
not_affected_if: ["no-local-users"]
published_at: "2026-11-10T19:17:42+00:00"
first_seen_at: "2026-11-10T19:24:13+00:00"
updated_at: "2026-11-10T19:34:19+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-105021", "first_seen_at": "2026-11-10T19:24:13+00:00"}]
exploit_sources: []
---

# Windows: heap overflow in graphics platform lets a local user gain privileges

Link for people: https://infrastack.ai/live/CVE-2026-105021 (this .md is for agents)

A heap-based buffer overflow in the Windows Advanced Rasterization Platform, the graphics component, can be triggered by an authorized local user. An attacker who can already log on can use it to raise their privileges.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Windows Advanced Rasterization Platform affected range not listed fixed no fixed version listed

## Timeline

- 2026-11-10T19:24:13+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-105021

## From the sources

Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_