---
id: "CVE-2026-105023"
page: "https://infrastack.ai/live/CVE-2026-105023"
kind: "vulnerability"
aliases: ["CVE-2026-105023"]
title: "Windows Advanced Rasterization Platform: heap overflow lets a local user gain privileges"
severity: "high"
cvss: 8.8
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: [{"name": "Windows 10 1809 / Server 2019", "fixed": ["10.0.17763.9376"], "affected": ">= 10.0.17763.0, < 10.0.17763.9376", "ecosystem": "microsoft"}, {"name": "Windows 10 21H2", "fixed": ["10.0.19044.7807"], "affected": ">= 10.0.19044.0, < 10.0.19044.7807", "ecosystem": "microsoft"}, {"name": "Windows 10 22H2", "fixed": ["10.0.19045.7807"], "affected": ">= 10.0.19045.0, < 10.0.19045.7807", "ecosystem": "microsoft"}, {"name": "Windows 11 23H2", "fixed": ["10.0.22631.7652"], "affected": ">= 10.0.22631.0, < 10.0.22631.7652", "ecosystem": "microsoft"}, {"name": "Windows 11 24H2", "fixed": ["10.0.26100.9711"], "affected": ">= 10.0.26100.0, < 10.0.26100.9711", "ecosystem": "microsoft"}, {"name": "Windows 11 25H2", "fixed": ["10.0.26200.9711"], "affected": ">= 10.0.26200.0, < 10.0.26200.9711", "ecosystem": "microsoft"}, {"name": "Windows 11 26H1", "fixed": ["10.0.28000.3231"], "affected": ">= 10.0.28000.0, < 10.0.28000.3231", "ecosystem": "microsoft"}, {"name": "Windows 11 26H2", "fixed": ["10.0.26300.9711"], "affected": ">= 10.0.26300.0, < 10.0.26300.9711", "ecosystem": "microsoft"}, {"name": "Windows Server 2022", "fixed": ["10.0.20348.5761"], "affected": ">= 10.0.20348.0, < 10.0.20348.5761", "ecosystem": "microsoft"}, {"name": "Windows Server 2025", "fixed": ["10.0.26100.33650"], "affected": ">= 10.0.26100.0, < 10.0.26100.33650", "ecosystem": "microsoft"}]
ecosystems: []
tags: ["infrastructure", "local-privilege-escalation", "windows", "windows-10", "windows-11", "windows-server"]
not_affected_if: ["patched-build", "single-user-no-untrusted-code"]
published_at: "2026-11-10T19:17:43+00:00"
first_seen_at: "2026-11-10T19:24:13+00:00"
updated_at: "2026-11-11T01:10:09+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-105023", "first_seen_at": "2026-11-10T19:24:13+00:00"}, {"source": "analyst", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-105023", "first_seen_at": "2026-11-11T01:10:09+00:00", "cites": ["https://nvd.nist.gov/vuln/detail/CVE-2026-105023", "https://basefortify.eu/cve-reports/2026/11/cve-2026-105023.html"]}]
exploit_sources: []
---

# Windows Advanced Rasterization Platform: heap overflow lets a local user gain privileges

Link for people: https://infrastack.ai/live/CVE-2026-105023 (this .md is for agents)

A heap buffer overflow in the Windows Advanced Rasterization Platform (WARP) lets a local, low-privileged user gain higher privileges (CVSS 8.8, CWE-122). It cannot be triggered remotely. No exploitation or public PoC found; not in CISA KEV.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- microsoft:Windows 10 1809 / Server 2019 affected >= 10.0.17763.0, < 10.0.17763.9376 fixed 10.0.17763.9376
- microsoft:Windows 10 21H2 affected >= 10.0.19044.0, < 10.0.19044.7807 fixed 10.0.19044.7807
- microsoft:Windows 10 22H2 affected >= 10.0.19045.0, < 10.0.19045.7807 fixed 10.0.19045.7807
- microsoft:Windows 11 23H2 affected >= 10.0.22631.0, < 10.0.22631.7652 fixed 10.0.22631.7652
- microsoft:Windows 11 24H2 affected >= 10.0.26100.0, < 10.0.26100.9711 fixed 10.0.26100.9711
- microsoft:Windows 11 25H2 affected >= 10.0.26200.0, < 10.0.26200.9711 fixed 10.0.26200.9711
- microsoft:Windows 11 26H1 affected >= 10.0.28000.0, < 10.0.28000.3231 fixed 10.0.28000.3231
- microsoft:Windows 11 26H2 affected >= 10.0.26300.0, < 10.0.26300.9711 fixed 10.0.26300.9711
- microsoft:Windows Server 2022 affected >= 10.0.20348.0, < 10.0.20348.5761 fixed 10.0.20348.5761
- microsoft:Windows Server 2025 affected >= 10.0.26100.0, < 10.0.26100.33650 fixed 10.0.26100.33650

## How to check

Run winver or PowerShell [System.Environment]::OSVersion.Version / (Get-ItemProperty 'HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion').UBR to read the full build (e.g. 10.0.26100.xxxx). If it is below the fixed build for your Windows version, you are exposed.

## Fix

Install the November 2026 Windows cumulative update that brings the build to at least: Win10 1809/Server 2019 10.0.17763.9376, Win10 21H2 10.0.19044.7807, Win10 22H2 10.0.19045.7807, Win11 23H2 10.0.22631.7652, Win11 24H2 10.0.26100.9711, Win11 25H2 10.0.26200.9711, Win11 26H1 10.0.28000.3231, Win11 26H2 10.0.26300.9711, Server 2022 10.0.20348.5761, Server 2025 10.0.26100.33650. KB numbers: see the MSRC update guide entry.

## Timeline

- 2026-11-10T19:24:13+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-105023
- 2026-11-11T01:10:09+00:00 analyst https://nvd.nist.gov/vuln/detail/CVE-2026-105023 — MSRC page is JS-only and unreadable; builds taken from Microsoft's CNA record as shown on NVD and BaseFortify. KB numbers not found. Nothing marked verified. No exploitation or PoC found.

## Documents

- [advisory] NVD CVE-2026-105023 (Microsoft CNA data) https://nvd.nist.gov/vuln/detail/CVE-2026-105023
- [describes] BaseFortify CVE-2026-105023 affected builds https://basefortify.eu/cve-reports/2026/11/cve-2026-105023.html

## From the sources

Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_