{"id":"CVE-2026-94515","kind":"vulnerability","aliases":["CVE-2026-94515"],"related":[],"title":"Windows: heap overflow in graphics platform lets a local user gain admin rights","description":"Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.","summary":"A heap-based buffer overflow in the Windows Advanced Rasterization Platform, the graphics component of Windows, lets an authorized local user raise their privileges. The sources say an attacker must already be able to run code on the machine.","severity":"high","cvss":7.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","windows"],"not_affected_if":["no-local-users"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:21:37+00:00","first_seen_at":"2026-11-10T19:25:21+00:00","triaged_at":"2026-11-10T19:38:32+00:00","updated_at":"2026-11-10T19:38:32+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T19:38:32Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Windows: heap overflow in graphics platform lets a local user gain admin rights","impact":"high","summary":"A heap-based buffer overflow in the Windows Advanced Rasterization Platform, the graphics component of Windows, lets an authorized local user raise their privileges. The sources say an attacker must already be able to run code on the machine.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"local user gains SYSTEM-level privileges on the machine","analyst_note":"Check the NVD entry and Microsoft's security update guide for affected Windows builds, fixed KB numbers and whether exploitation has been seen.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-local-users"],"who_is_affected":"Any Windows machine where a user already has a local account can be affected, since the flaw is triggered locally. The sources do not name affected Windows builds or whether the flaw applies to any non-default setup. Servers and workstations shared by multiple users carry the most risk.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000677,"input_tokens":4502,"output_tokens":454,"severity_before":"high"},"analyst_status":"queued","analyst_note":"Check the NVD entry and Microsoft's security update guide for affected Windows builds, fixed KB numbers and whether exploitation has been seen.","search":"'-2026':15A,18A '-94515':16A,19A 'abl':55B 'admin':12A 'advanc':31B,69C 'allow':72C 'alreadi':53B 'attack':51B,75C 'author':41B,74C 'base':25B,64C 'buffer':26B,65C 'code':58B 'compon':36B 'cve':14A,17A 'elev':77C 'gain':11A 'graphic':5A,35B 'heap':2A,24B,63C 'heap-bas':23B,62C 'infrastructur':20B 'let':7A,39B 'local':9A,42B,79C 'machin':61B 'must':52B 'overflow':3A,27B,66C 'platform':6A,33B,71C 'privileg':46B,78C 'rais':44B 'raster':32B,70C 'right':13A 'run':57B 'say':49B 'sourc':48B 'user':10A,43B 'window':1A,21B,30B,38B,68C","nicknames":[],"mitigations":[],"who_affected":"Any Windows machine where a user already has a local account can be affected, since the flaw is triggered locally. The sources do not name affected Windows builds or whether the flaw applies to any non-default setup. Servers and workstations shared by multiple users carry the most risk.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["high","infrastructure","windows"],"campaign_type":null,"search_a":"'-2026':15A,18A '-94515':16A,19A 'admin':12A 'cve':14A,17A 'gain':11A 'graphic':5A 'heap':2A 'let':7A 'local':9A 'overflow':3A 'platform':6A 'right':13A 'user':10A 'window':1A","search_b":"'abl':55B 'advanc':31B 'alreadi':53B 'attack':51B 'author':41B 'base':25B 'buffer':26B 'code':58B 'compon':36B 'graphic':35B 'heap':24B 'heap-bas':23B 'infrastructur':20B 'let':39B 'local':42B 'machin':61B 'must':52B 'overflow':27B 'platform':33B 'privileg':46B 'rais':44B 'raster':32B 'run':57B 'say':49B 'sourc':48B 'user':43B 'window':21B,30B,38B","search_c":"'advanc':69C 'allow':72C 'attack':75C 'author':74C 'base':64C 'buffer':65C 'elev':77C 'heap':63C 'heap-bas':62C 'local':79C 'overflow':66C 'platform':71C 'privileg':78C 'raster':70C 'window':68C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:21:37+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-94515","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94515","severity":null,"published_at":"2026-11-10T19:21:37+00:00","modified_at":"2026-11-10T19:21:37+00:00","first_seen_at":"2026-11-10T19:25:21+00:00","fetched_at":"2026-11-10T19:25:21+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}