CVE-2026-118223 · Infrastructure
NO FIX YET
A memory-handling bug in the Windows Advanced Rasterization Platform, a graphics component, can be abused by a logged-in local user to raise their privileges. The sources give no further detail on exploitation.
first public Nov 10, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Affects Windows systems where an attacker already has a local account on the machine, such as shared workstations, terminal servers, or hosts where untrusted users run code. The sources do not list affected Windows builds. Machines without untrusted local users are at lower risk.
Not affected if no-local-untrusted-users
Who cares windows
winver and compare it against the update listed for CVE-2026-118223 in Microsoft's security guideNo fix yet, per the sources.
Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
This page as .md · .json · CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.