---
id: "CVE-2026-105491"
page: "https://infrastack.ai/live/CVE-2026-105491"
kind: "vulnerability"
aliases: ["CVE-2026-105491"]
title: "Windows: heap overflow in graphics platform lets local users gain admin rights"
severity: "high"
cvss: 8.8
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: [{"name": "Windows Advanced Rasterization Platform", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["infrastructure", "windows"]
not_affected_if: ["no-local-accounts"]
published_at: "2026-11-10T19:17:46+00:00"
first_seen_at: "2026-11-10T19:24:14+00:00"
updated_at: "2026-11-10T19:34:14+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-105491", "first_seen_at": "2026-11-10T19:24:14+00:00"}]
exploit_sources: []
---

# Windows: heap overflow in graphics platform lets local users gain admin rights

Link for people: https://infrastack.ai/live/CVE-2026-105491 (this .md is for agents)

A heap-based buffer overflow in the Windows Advanced Rasterization Platform, the graphics component used by Windows, lets an authorized local user raise their privileges. The sources rate it high severity (CVSS 8.8) and report no exploitation in the wild.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Windows Advanced Rasterization Platform affected range not listed fixed no fixed version listed

## Timeline

- 2026-11-10T19:24:14+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-105491

## From the sources

Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_