{"id":"CVE-2026-94507","kind":"vulnerability","aliases":["CVE-2026-94507"],"related":[],"title":"Windows DirectX: heap overflow lets a local user gain higher privileges","description":"Heap-based buffer overflow in Windows DirectX allows an authorized attacker to elevate privileges locally.","summary":"A heap-based buffer overflow in the Windows DirectX graphics component lets an authorized local user elevate their privileges. The sources do not describe the exact trigger or the conditions needed beyond local authorized access.","severity":"high","cvss":7.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["directx","infrastructure","windows"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:21:36+00:00","first_seen_at":"2026-11-10T19:25:21+00:00","triaged_at":"2026-11-10T19:38:33+00:00","updated_at":"2026-11-10T19:38:33+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T19:38:33Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Windows DirectX: heap overflow lets a local user gain higher privileges","impact":"high","summary":"A heap-based buffer overflow in the Windows DirectX graphics component lets an authorized local user elevate their privileges. The sources do not describe the exact trigger or the conditions needed beyond local authorized access.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows","directx"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"local user gains system-level privileges on the machine","analyst_note":"Check the Microsoft Security Update Guide entry for affected Windows builds, the fixed update, and whether exploitation is seen; the NVD record alone gives no versions.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Windows machines with DirectX present are the affected component; the sources only say an authorized local attacker can elevate privileges. Shared workstations and multi-user servers carry the most risk from a local account. unknown for the exact affected Windows builds.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000669,"input_tokens":4490,"output_tokens":440,"severity_before":"high"},"analyst_status":"queued","analyst_note":"Check the Microsoft Security Update Guide entry for affected Windows builds, the fixed update, and whether exploitation is seen; the NVD record alone gives no versions.","search":"'-2026':13A,16A '-94507':14A,17A 'access':56B 'allow':65C 'attack':68C 'author':35B,55B,67C 'base':24B,59C 'beyond':53B 'buffer':25B,60C 'compon':32B 'condit':51B 'cve':12A,15A 'describ':45B 'directx':2A,18B,30B,64C 'elev':38B,70C 'exact':47B 'gain':9A 'graphic':31B 'heap':3A,23B,58C 'heap-bas':22B,57C 'higher':10A 'infrastructur':19B 'let':5A,33B 'local':7A,36B,54B,72C 'need':52B 'overflow':4A,26B,61C 'privileg':11A,40B,71C 'sourc':42B 'trigger':48B 'user':8A,37B 'window':1A,20B,29B,63C","nicknames":[],"mitigations":[],"who_affected":"Windows machines with DirectX present are the affected component; the sources only say an authorized local attacker can elevate privileges. Shared workstations and multi-user servers carry the most risk from a local account. unknown for the exact affected Windows builds.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["directx","high","infrastructure","windows"],"campaign_type":null,"search_a":"'-2026':13A,16A '-94507':14A,17A 'cve':12A,15A 'directx':2A 'gain':9A 'heap':3A 'higher':10A 'let':5A 'local':7A 'overflow':4A 'privileg':11A 'user':8A 'window':1A","search_b":"'access':56B 'author':35B,55B 'base':24B 'beyond':53B 'buffer':25B 'compon':32B 'condit':51B 'describ':45B 'directx':18B,30B 'elev':38B 'exact':47B 'graphic':31B 'heap':23B 'heap-bas':22B 'infrastructur':19B 'let':33B 'local':36B,54B 'need':52B 'overflow':26B 'privileg':40B 'sourc':42B 'trigger':48B 'user':37B 'window':20B,29B","search_c":"'allow':65C 'attack':68C 'author':67C 'base':59C 'buffer':60C 'directx':64C 'elev':70C 'heap':58C 'heap-bas':57C 'local':72C 'overflow':61C 'privileg':71C 'window':63C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:21:36+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-94507","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94507","severity":null,"published_at":"2026-11-10T19:21:36+00:00","modified_at":"2026-11-10T19:21:36+00:00","first_seen_at":"2026-11-10T19:25:21+00:00","fetched_at":"2026-11-10T19:25:21+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}