---
id: "CVE-2026-94515"
page: "https://infrastack.ai/live/CVE-2026-94515"
kind: "vulnerability"
aliases: ["CVE-2026-94515"]
title: "Windows: heap overflow in graphics platform lets a local user gain admin rights"
severity: "high"
cvss: 7.8
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: [{"name": "Windows 10 1809 / Server 2019", "fixed": ["10.0.17763.9376"], "affected": "< 10.0.17763.9376", "ecosystem": "microsoft"}, {"name": "Windows 10 21H2", "fixed": ["10.0.19044.7807"], "affected": "< 10.0.19044.7807", "ecosystem": "microsoft"}, {"name": "Windows 10 22H2", "fixed": ["10.0.19045.7807"], "affected": "< 10.0.19045.7807", "ecosystem": "microsoft"}, {"name": "Windows 11 23H2", "fixed": ["10.0.22631.7652"], "affected": "< 10.0.22631.7652", "ecosystem": "microsoft"}, {"name": "Windows 11 24H2", "fixed": ["10.0.26100.9711"], "affected": "< 10.0.26100.9711", "ecosystem": "microsoft"}, {"name": "Windows 11 25H2", "fixed": ["10.0.26200.9711"], "affected": "< 10.0.26200.9711", "ecosystem": "microsoft"}, {"name": "Windows 11 26H1", "fixed": ["10.0.28000.3231"], "affected": "< 10.0.28000.3231", "ecosystem": "microsoft"}, {"name": "Windows 11 26H2", "fixed": ["10.0.26300.9711"], "affected": "< 10.0.26300.9711", "ecosystem": "microsoft"}, {"name": "Windows Server 2022", "fixed": ["10.0.20348.5761"], "affected": "< 10.0.20348.5761", "ecosystem": "microsoft"}, {"name": "Windows Server 2025", "fixed": ["10.0.26100.33650"], "affected": "< 10.0.26100.33650", "ecosystem": "microsoft"}]
ecosystems: []
tags: ["infrastructure", "privilege-escalation", "windows"]
not_affected_if: ["no-local-users", "patched-build"]
published_at: "2026-11-10T19:21:37+00:00"
first_seen_at: "2026-11-10T19:25:21+00:00"
updated_at: "2026-11-10T20:38:11+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-94515", "first_seen_at": "2026-11-10T19:25:21+00:00"}, {"source": "analyst", "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-94515", "first_seen_at": "2026-11-10T20:38:11+00:00", "cites": ["https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-94515", "https://radar.offseq.com/threat/cve-2026-94515-cwe-122-heap-based-buffer-overflow-in-microsoft-windows-10-version-1809-69f2cf9a042980e3"]}]
exploit_sources: []
---

# Windows: heap overflow in graphics platform lets a local user gain admin rights

Link for people: https://infrastack.ai/live/CVE-2026-94515 (this .md is for agents)

A heap-based buffer overflow in the Windows Advanced Rasterization Platform, the graphics component of Windows, lets an authorized local user raise their privileges. The sources say an attacker must already be able to run code on the machine.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- microsoft:Windows 10 1809 / Server 2019 affected < 10.0.17763.9376 fixed 10.0.17763.9376
- microsoft:Windows 10 21H2 affected < 10.0.19044.7807 fixed 10.0.19044.7807
- microsoft:Windows 10 22H2 affected < 10.0.19045.7807 fixed 10.0.19045.7807
- microsoft:Windows 11 23H2 affected < 10.0.22631.7652 fixed 10.0.22631.7652
- microsoft:Windows 11 24H2 affected < 10.0.26100.9711 fixed 10.0.26100.9711
- microsoft:Windows 11 25H2 affected < 10.0.26200.9711 fixed 10.0.26200.9711
- microsoft:Windows 11 26H1 affected < 10.0.28000.3231 fixed 10.0.28000.3231
- microsoft:Windows 11 26H2 affected < 10.0.26300.9711 fixed 10.0.26300.9711
- microsoft:Windows Server 2022 affected < 10.0.20348.5761 fixed 10.0.20348.5761
- microsoft:Windows Server 2025 affected < 10.0.26100.33650 fixed 10.0.26100.33650

## How to check

Run winver or [System.Environment]::OSVersion / (Get-ComputerInfo).OsBuildNumber plus UBR (reg query 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion' /v UBR) and compare the full build (e.g. 10.0.19045.<UBR>) with the fixed builds in the fix field; lower means exposed.

## Fix

Install the November 2026 Windows cumulative update that brings the OS build to at least: Win10 1809/Server 2019 10.0.17763.9376; Win10 21H2 10.0.19044.7807; Win10 22H2 10.0.19045.7807; Win11 23H2 10.0.22631.7652; Win11 24H2 10.0.26100.9711; Win11 25H2 10.0.26200.9711; Win11 26H1 10.0.28000.3231; Win11 26H2 10.0.26300.9711; Server 2022 10.0.20348.5761; Server 2025 10.0.26100.33650. KB numbers: see MSRC update guide (not read).

## Timeline

- 2026-11-10T19:25:21+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-94515
- 2026-11-10T20:38:11+00:00 analyst https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-94515 — Read Microsoft CNA affected data via NVD API (MSRC page not retrievable): per-build fixed versions. No KB numbers read; no exploitation or PoC seen (OffSeq: E:U). Not marked verified for how_to_check.

## Documents

- [advisory] NVD record CVE-2026-94515 (Microsoft CNA affected data) https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-94515
- [mentions] OffSeq Threat Radar CVE-2026-94515 https://radar.offseq.com/threat/cve-2026-94515-cwe-122-heap-based-buffer-overflow-in-microsoft-windows-10-version-1809-69f2cf9a042980e3

## From the sources

Heap-based buffer overflow in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_