---
id: "CVE-2026-95909"
page: "https://infrastack.ai/live/CVE-2026-95909"
kind: "vulnerability"
aliases: ["CVE-2026-95909"]
title: "Windows Graphics Kernel: out-of-bounds read lets a local user gain privileges"
severity: "high"
cvss: 7.8
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: [{"name": "Windows 10 1607 / Server 2016", "fixed": ["10.0.14393.9688"], "affected": "< 10.0.14393.9688", "ecosystem": "microsoft"}, {"name": "Windows 10 1809 / Server 2019", "fixed": ["10.0.17763.9487"], "affected": "< 10.0.17763.9487", "ecosystem": "microsoft"}, {"name": "Windows 10 21H2", "fixed": ["10.0.19044.7846"], "affected": "< 10.0.19044.7846", "ecosystem": "microsoft"}, {"name": "Windows 10 22H2", "fixed": ["10.0.19045.7846"], "affected": "< 10.0.19045.7846", "ecosystem": "microsoft"}, {"name": "Windows 11 23H2", "fixed": ["10.0.22631.7711"], "affected": "< 10.0.22631.7711", "ecosystem": "microsoft"}, {"name": "Windows 11 24H2", "fixed": ["10.0.26100.9974"], "affected": "< 10.0.26100.9974", "ecosystem": "microsoft"}, {"name": "Windows 11 25H2", "fixed": ["10.0.26200.9974"], "affected": "< 10.0.26200.9974", "ecosystem": "microsoft"}, {"name": "Windows 11 26H1", "fixed": ["10.0.28000.3501"], "affected": "< 10.0.28000.3501", "ecosystem": "microsoft"}, {"name": "Windows 11 26H2", "fixed": ["10.0.26300.9974"], "affected": "< 10.0.26300.9974", "ecosystem": "microsoft"}, {"name": "Windows Server 2022", "fixed": ["10.0.20348.5870"], "affected": "< 10.0.20348.5870", "ecosystem": "microsoft"}, {"name": "Windows Server 2025", "fixed": ["10.0.26100.33822"], "affected": "< 10.0.26100.33822", "ecosystem": "microsoft"}]
ecosystems: []
tags: ["cwe-125", "graphics-kernel", "infrastructure", "local-privilege-escalation", "windows"]
not_affected_if: ["no-local-users", "patched-nov-2026"]
published_at: "2026-11-10T19:21:44+00:00"
first_seen_at: "2026-11-10T19:25:23+00:00"
updated_at: "2026-11-10T20:27:37+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-95909", "first_seen_at": "2026-11-10T19:25:23+00:00"}, {"source": "analyst", "url": "https://app.opencve.io/cve/CVE-2026-95909", "first_seen_at": "2026-11-10T20:27:37+00:00", "cites": ["https://app.opencve.io/cve/CVE-2026-95909", "https://winaero.com/patch-tuesday-cumulative-updates-for-windows-11-and-10-november-10-2026/"]}]
exploit_sources: []
---

# Windows Graphics Kernel: out-of-bounds read lets a local user gain privileges

Link for people: https://infrastack.ai/live/CVE-2026-95909 (this .md is for agents)

A memory read past the end of a buffer in the Windows Graphics Kernel lets an authorized local user elevate their privileges. The attacker needs a valid account on the machine first.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- microsoft:Windows 10 1607 / Server 2016 affected < 10.0.14393.9688 fixed 10.0.14393.9688
- microsoft:Windows 10 1809 / Server 2019 affected < 10.0.17763.9487 fixed 10.0.17763.9487
- microsoft:Windows 10 21H2 affected < 10.0.19044.7846 fixed 10.0.19044.7846
- microsoft:Windows 10 22H2 affected < 10.0.19045.7846 fixed 10.0.19045.7846
- microsoft:Windows 11 23H2 affected < 10.0.22631.7711 fixed 10.0.22631.7711
- microsoft:Windows 11 24H2 affected < 10.0.26100.9974 fixed 10.0.26100.9974
- microsoft:Windows 11 25H2 affected < 10.0.26200.9974 fixed 10.0.26200.9974
- microsoft:Windows 11 26H1 affected < 10.0.28000.3501 fixed 10.0.28000.3501
- microsoft:Windows 11 26H2 affected < 10.0.26300.9974 fixed 10.0.26300.9974
- microsoft:Windows Server 2022 affected < 10.0.20348.5870 fixed 10.0.20348.5870
- microsoft:Windows Server 2025 affected < 10.0.26100.33822 fixed 10.0.26100.33822

## How to check

Run winver or [Environment]::OSVersion in PowerShell and compare the build with the fixed build for your Windows version (see products). Builds below the fixed one are exposed. Confirm against the Microsoft Security Update Guide entry.

## Fix

Install the November 10, 2026 Windows cumulative update, e.g. Windows 11 24H2/25H2: KB5132061 (build 26100/26200.9974); Windows 11 23H2: KB5131087 (build 22631.7711). Per-version fixed builds are in the product rows.

## Timeline

- 2026-11-10T19:25:23+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-95909
- 2026-11-10T20:27:37+00:00 analyst https://app.opencve.io/cve/CVE-2026-95909 — MSRC page unreadable by tools (JS only); versions taken from OpenCVE mirror of Microsoft CNA record, so nothing marked verified. Not exploited per CVSS E:U; no PoC found.

## Documents

- [describes] OpenCVE: CVE-2026-95909 (mirrors Microsoft CNA record) https://app.opencve.io/cve/CVE-2026-95909
- [mentions] Patch Tuesday cumulative updates, November 10, 2026 (Winaero) https://winaero.com/patch-tuesday-cumulative-updates-for-windows-11-and-10-november-10-2026/

## From the sources

Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_