---
id: "CVE-2026-118225"
page: "https://infrastack.ai/live/CVE-2026-118225"
kind: "vulnerability"
aliases: ["CVE-2026-118225"]
title: "Windows Advanced Rasterization Platform: local attacker can gain elevated privileges"
severity: "high"
cvss: 8.8
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: [{"name": "Windows Advanced Rasterization Platform", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["infrastructure", "windows"]
not_affected_if: []
published_at: "2026-11-10T19:19:40+00:00"
first_seen_at: "2026-11-10T19:24:50+00:00"
updated_at: "2026-11-10T19:30:07+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-118225", "first_seen_at": "2026-11-10T19:24:50+00:00"}]
exploit_sources: []
---

# Windows Advanced Rasterization Platform: local attacker can gain elevated privileges

Link for people: https://infrastack.ai/live/CVE-2026-118225 (this .md is for agents)

Windows Advanced Rasterization Platform includes functionality from an untrusted control sphere, which an authorized local user can abuse. The attacker gains elevated privileges on the affected machine.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Windows Advanced Rasterization Platform affected range not listed fixed no fixed version listed

## Timeline

- 2026-11-10T19:24:50+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-118225

## From the sources

Inclusion of functionality from untrusted control sphere in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_