{"id":"CVE-2026-118283","kind":"vulnerability","aliases":["CVE-2026-118283"],"related":[],"title":"Windows graphics platform stack overflow lets a local user gain higher privileges","description":"Stack-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.","summary":"A stack-based buffer overflow in the Windows Advanced Rasterization Platform, the graphics component inside Windows, can be triggered by an attacker who already has an account on the machine. A successful attack lets that attacker elevate their privileges on the local system.","severity":"high","cvss":8.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["desktop","infrastructure","multi-user","windows"],"not_affected_if":["no-local-accounts"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:19:42+00:00","first_seen_at":"2026-11-10T19:24:51+00:00","triaged_at":"2026-11-10T19:30:00+00:00","updated_at":"2026-11-10T19:30:00+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T19:30:00Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Windows graphics platform stack overflow lets a local user gain higher privileges","impact":"high","summary":"A stack-based buffer overflow in the Windows Advanced Rasterization Platform, the graphics component inside Windows, can be triggered by an attacker who already has an account on the machine. A successful attack lets that attacker elevate their privileges on the local system.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows","desktop","multi-user"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"local attacker gains elevated system privileges on the machine","analyst_note":"Find the affected Windows builds and the Microsoft patch for CVE-2026-118283 in the Microsoft Security Update Guide; the sources give no version or fix.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-local-accounts"],"who_is_affected":"Any Windows machine running a version affected by this flaw is exposed, but only to someone who can already log on locally. The sources do not name the affected Windows builds or the patch, so check Microsoft's security update guide for this CVE. Shared multi-user systems and servers where untrusted accounts can log on are the priority.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000697,"input_tokens":4502,"output_tokens":493,"severity_before":"high"},"analyst_status":"queued","analyst_note":"Find the affected Windows builds and the Microsoft patch for CVE-2026-118283 in the Microsoft Security Update Guide; the sources give no version or fix.","search":"'-118283':15A,18A '-2026':14A,17A 'account':52B 'advanc':34B,76C 'allow':79C 'alreadi':49B 'attack':47B,58B,61B,82C 'author':81C 'base':28B,71C 'buffer':29B,72C 'compon':39B 'cve':13A,16A 'desktop':19B 'elev':62B,84C 'gain':10A 'graphic':2A,38B 'higher':11A 'infrastructur':20B 'insid':40B 'let':6A,59B 'local':8A,67B,86C 'machin':55B 'multi':22B 'multi-us':21B 'overflow':5A,30B,73C 'platform':3A,36B,78C 'privileg':12A,64B,85C 'raster':35B,77C 'stack':4A,27B,70C 'stack-bas':26B,69C 'success':57B 'system':68B 'trigger':44B 'user':9A,23B 'window':1A,24B,33B,41B,75C","nicknames":[],"mitigations":[],"who_affected":"Any Windows machine running a version affected by this flaw is exposed, but only to someone who can already log on locally. The sources do not name the affected Windows builds or the patch, so check Microsoft's security update guide for this CVE. Shared multi-user systems and servers where untrusted accounts can log on are the priority.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["desktop","high","infrastructure","multiuser","windows"],"campaign_type":null,"search_a":"'-118283':15A,18A '-2026':14A,17A 'cve':13A,16A 'gain':10A 'graphic':2A 'higher':11A 'let':6A 'local':8A 'overflow':5A 'platform':3A 'privileg':12A 'stack':4A 'user':9A 'window':1A","search_b":"'account':52B 'advanc':34B 'alreadi':49B 'attack':47B,58B,61B 'base':28B 'buffer':29B 'compon':39B 'desktop':19B 'elev':62B 'graphic':38B 'infrastructur':20B 'insid':40B 'let':59B 'local':67B 'machin':55B 'multi':22B 'multi-us':21B 'overflow':30B 'platform':36B 'privileg':64B 'raster':35B 'stack':27B 'stack-bas':26B 'success':57B 'system':68B 'trigger':44B 'user':23B 'window':24B,33B,41B","search_c":"'advanc':76C 'allow':79C 'attack':82C 'author':81C 'base':71C 'buffer':72C 'elev':84C 'local':86C 'overflow':73C 'platform':78C 'privileg':85C 'raster':77C 'stack':70C 'stack-bas':69C 'window':75C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:19:42+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-118283","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-118283","severity":null,"published_at":"2026-11-10T19:19:42+00:00","modified_at":"2026-11-10T19:19:42+00:00","first_seen_at":"2026-11-10T19:24:51+00:00","fetched_at":"2026-11-10T19:24:51+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}