WINDOWS GRAPHICS KERNEL · CVE-2026-95879 · Infrastructure
NO FIX YET
A flaw in the Windows Graphics Kernel lets a user who already has an account on the machine read memory past the end of a buffer. An attacker can use this to raise their privileges on that machine.
first public Nov 10, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Any Windows machine with the Graphics Kernel component is in scope, and the attacker must already be able to run code or log in locally. Shared servers, multi-user desktops and terminal hosts carry the most risk. Single-user machines where only trusted people log in can deprioritize it.
Not affected if no-local-users, single-user-machine
Who cares windows
winver or Settings > System > About.No fix yet, per the sources.
Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
This page as .md · .json · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.