{"id":"CVE-2026-118277","kind":"vulnerability","aliases":["CVE-2026-118277"],"related":[],"title":"Windows: heap overflow in graphics platform lets local users gain privileges","description":"Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.","summary":"A heap-based buffer overflow in the Windows Advanced Rasterization Platform, the graphics component of Windows, can be triggered by an authorized local user. A successful attack lets that user elevate their privileges on the machine.","severity":"high","cvss":8.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","windows"],"not_affected_if":[],"how_to_check":"Unknown: Microsoft's affected builds were not readable. Check the MSRC Update Guide entry for CVE-2026-118277 for your Windows version, then compare your build (winver) against the fixed build listed there.","fix":null,"status":"open","published_at":"2026-11-10T19:19:41+00:00","first_seen_at":"2026-11-10T19:24:51+00:00","triaged_at":"2026-11-10T19:30:02+00:00","updated_at":"2026-11-10T23:16:47+00:00","category":"infrastructure","confidence":0.4,"triage":{"at":"2026-11-10T19:30:02Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Windows: heap overflow in graphics platform lets local users gain privileges","impact":"high","summary":"A heap-based buffer overflow in the Windows Advanced Rasterization Platform, the graphics component of Windows, can be triggered by an authorized local user. A successful attack lets that user elevate their privileges on the machine.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"local user gains SYSTEM-level privileges on the machine","analyst_note":"Find the Microsoft security update guide entry for CVE-2026-118277 to get affected Windows builds, fixed builds and any mitigation.","how_to_check":"- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Machines running affected Windows versions where a user already has a local account can be elevated to higher privileges. The sources do not list affected Windows builds or the patch level, so the exact exposure is unknown. Systems where no untrusted users have local logons are lower risk.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000671,"input_tokens":4502,"output_tokens":442,"severity_before":"high"},"analyst_status":"done","analyst_note":"Find the Microsoft security update guide entry for CVE-2026-118277 to get affected Windows builds, fixed builds and any mitigation.","search":"'-118277':14A,17A '-2026':13A,16A 'advanc':29B,64C 'allow':67C 'attack':47B,70C 'author':42B,69C 'base':23B,59C 'buffer':24B,60C 'compon':34B 'cve':12A,15A 'elev':51B,72C 'gain':10A 'graphic':5A,33B 'heap':2A,22B,58C 'heap-bas':21B,57C 'infrastructur':18B 'let':7A,48B 'local':8A,43B,74C 'machin':56B 'overflow':3A,25B,61C 'platform':6A,31B,66C 'privileg':11A,53B,73C 'raster':30B,65C 'success':46B 'trigger':39B 'user':9A,44B,50B 'window':1A,19B,28B,36B,63C","nicknames":[],"mitigations":[],"who_affected":"Windows machines where someone already has a local account could let that user gain higher privileges through a heap overflow in the Windows Advanced Rasterization Platform (WARP, the software graphics renderer). The affected Windows builds and fixed builds are not yet confirmed from Microsoft's own page. Systems where no untrusted users can log on locally are lower risk.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["high","infrastructure","windows"],"campaign_type":null,"search_a":"'-118277':14A,17A '-2026':13A,16A 'cve':12A,15A 'gain':10A 'graphic':5A 'heap':2A 'let':7A 'local':8A 'overflow':3A 'platform':6A 'privileg':11A 'user':9A 'window':1A","search_b":"'advanc':29B 'attack':47B 'author':42B 'base':23B 'buffer':24B 'compon':34B 'elev':51B 'graphic':33B 'heap':22B 'heap-bas':21B 'infrastructur':18B 'let':48B 'local':43B 'machin':56B 'overflow':25B 'platform':31B 'privileg':53B 'raster':30B 'success':46B 'trigger':39B 'user':44B,50B 'window':19B,28B,36B","search_c":"'advanc':64C 'allow':67C 'attack':70C 'author':69C 'base':59C 'buffer':60C 'elev':72C 'heap':58C 'heap-bas':57C 'local':74C 'overflow':61C 'platform':66C 'privileg':73C 'raster':65C 'window':63C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:19:41+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-118277","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-118277","severity":null,"published_at":"2026-11-10T19:19:41+00:00","modified_at":"2026-11-10T19:19:41+00:00","first_seen_at":"2026-11-10T19:24:51+00:00","fetched_at":"2026-11-10T19:24:51+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-118277:3133","url":null,"severity":null,"published_at":"2026-11-10T23:16:47+00:00","modified_at":"2026-11-10T23:16:47+00:00","first_seen_at":"2026-11-10T23:16:47+00:00","fetched_at":"2026-11-10T23:16:47+00:00","note":"Could not read the MSRC entry: the update guide page is JS-only (WebFetch returned an empty shell), the CVRF API returned 404, and browser-cli returned 402 (plan limit). No affected or fixed builds found; only NVD (CVSS 8.8 per Microsoft) was available. Nothing verified. Settle by reading the MSRC page for this CVE or the November 2026 Patch Tuesday KB articles."}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}