{"id":"CVE-2026-105491","kind":"vulnerability","aliases":["CVE-2026-105491"],"related":[],"title":"Windows: heap overflow in graphics platform lets local users gain admin rights","description":"Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.","summary":"A heap-based buffer overflow in the Windows Advanced Rasterization Platform, the graphics component used by Windows, lets an authorized local user raise their privileges. The sources rate it high severity (CVSS 8.8) and report no exploitation in the wild.","severity":"high","cvss":8.8,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Windows Advanced Rasterization Platform","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["infrastructure","windows"],"not_affected_if":["no-local-accounts"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:17:46+00:00","first_seen_at":"2026-11-10T19:24:14+00:00","triaged_at":"2026-11-10T19:34:14+00:00","updated_at":"2026-11-10T19:34:14+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-11-10T19:34:14Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Windows: heap overflow in graphics platform lets local users gain admin rights","impact":"high","summary":"A heap-based buffer overflow in the Windows Advanced Rasterization Platform, the graphics component used by Windows, lets an authorized local user raise their privileges. The sources rate it high severity (CVSS 8.8) and report no exploitation in the wild.","audience":"everyone","category":"infrastructure","nicknames":[],"who_cares":["windows"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"local user gains system-level privileges on the machine","analyst_note":"Find the Microsoft advisory for CVE-2026-105491 to confirm affected Windows builds and the patch.","how_to_check":"unknown","plain_action":"Install the latest Windows security update from Microsoft as soon as it is available on your PC.","product_name":"Windows Advanced Rasterization Platform","needs_analyst":true,"not_affected_if":["no-local-accounts"],"who_is_affected":"Machines running Windows where a user already has a logon account can use this flaw to gain higher privileges locally. Systems with no untrusted local users are at lower risk. The sources do not name the affected Windows builds.","user_interaction":"no","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000697,"input_tokens":4502,"output_tokens":493,"severity_before":"high"},"analyst_status":"queued","analyst_note":"Find the Microsoft advisory for CVE-2026-105491 to confirm affected Windows builds and the patch.","search":"'-105491':15A,18A '-2026':14A,17A '8.8':58B 'admin':11A 'advanc':34B,73C 'advanced':20A 'allow':76C 'attack':79C 'author':45B,78C 'base':28B,68C 'buffer':29B,69C 'compon':39B 'cve':13A,16A 'cvss':57B 'elev':81C 'exploit':62B 'gain':10A 'graphic':5A,38B 'heap':2A,27B,67C 'heap-bas':26B,66C 'high':55B 'infrastructur':23B 'let':7A,43B 'local':8A,46B,83C 'overflow':3A,30B,70C 'platform':6A,22A,36B,75C 'privileg':50B,82C 'rais':48B 'raster':35B,74C 'rasterization':21A 'rate':53B 'report':60B 'right':12A 'sever':56B 'sourc':52B 'use':40B 'user':9A,47B 'wild':65B 'window':1A,24B,33B,42B,72C 'windows':19A","nicknames":[],"mitigations":[],"who_affected":"Machines running Windows where a user already has a logon account can use this flaw to gain higher privileges locally. Systems with no untrusted local users are at lower risk. The sources do not name the affected Windows builds.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"everyone","plain_action":null,"pkeys":["advancedrasterizationplatform","windowsadvancedrasterizationplatform"],"ptokens":["advanced","platform","rasterization","windows"],"labels":["high","infrastructure","vendor","windows"],"campaign_type":null,"search_a":"'-105491':15A,18A '-2026':14A,17A 'admin':11A 'advanced':20A 'cve':13A,16A 'gain':10A 'graphic':5A 'heap':2A 'let':7A 'local':8A 'overflow':3A 'platform':6A,22A 'rasterization':21A 'right':12A 'user':9A 'window':1A 'windows':19A","search_b":"'8.8':58B 'advanc':34B 'author':45B 'base':28B 'buffer':29B 'compon':39B 'cvss':57B 'exploit':62B 'graphic':38B 'heap':27B 'heap-bas':26B 'high':55B 'infrastructur':23B 'let':43B 'local':46B 'overflow':30B 'platform':36B 'privileg':50B 'rais':48B 'raster':35B 'rate':53B 'report':60B 'sever':56B 'sourc':52B 'use':40B 'user':47B 'wild':65B 'window':24B,33B,42B","search_c":"'advanc':73C 'allow':76C 'attack':79C 'author':78C 'base':68C 'buffer':69C 'elev':81C 'heap':67C 'heap-bas':66C 'local':83C 'overflow':70C 'platform':75C 'privileg':82C 'raster':74C 'window':72C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:17:46+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-105491","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105491","severity":null,"published_at":"2026-11-10T19:17:46+00:00","modified_at":"2026-11-10T19:17:46+00:00","first_seen_at":"2026-11-10T19:24:14+00:00","fetched_at":"2026-11-10T19:24:14+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}