---
id: "CVE-2026-95932"
page: "https://infrastack.ai/live/CVE-2026-95932"
kind: "vulnerability"
aliases: ["CVE-2026-95932"]
title: "Windows Graphics Kernel: local user can elevate privileges to administrator"
severity: "high"
cvss: 7.8
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["endpoints", "infrastructure", "local-privilege-escalation", "windows"]
not_affected_if: ["no-local-user-access"]
published_at: "2026-11-10T19:21:45+00:00"
first_seen_at: "2026-11-10T19:25:24+00:00"
updated_at: "2026-11-10T20:25:35+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-95932", "first_seen_at": "2026-11-10T19:25:24+00:00"}, {"source": "analyst", "url": "https://api.msrc.microsoft.com/cvrf/v3.0/updates/CVE-2026-95932", "first_seen_at": "2026-11-10T20:25:35+00:00", "cites": ["https://api.msrc.microsoft.com/cvrf/v3.0/updates/CVE-2026-95932", "https://windowsreport.com/windows-11-kb5132061-kb5131087-kb5132059-november-2026-patch-tuesday-updates-out-now/"]}]
exploit_sources: []
---

# Windows Graphics Kernel: local user can elevate privileges to administrator

Link for people: https://infrastack.ai/live/CVE-2026-95932 (this .md is for agents)

A flaw in the Windows Graphics Kernel lets an authorized attacker load functionality from an untrusted control sphere. An attacker with local access can use it to elevate privileges.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

Run winver, or in PowerShell: Get-HotFix. Look up CVE-2026-95932 in Microsoft's Security Update Guide to get the KB for your Windows edition. Per Windows Report, the November 10, 2026 cumulative updates are KB5132061 (Windows 11 24H2/25H2/26H2), KB5131087 (23H2) and KB5132059 (26H1). I did not confirm that these contain this fix.

## Fix

Install the November 2026 (2026-11-10) Windows cumulative update for your edition via Windows Update. The exact KB and build for this CVE are not confirmed.

## Timeline

- 2026-11-10T19:25:24+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-95932
- 2026-11-10T20:25:35+00:00 analyst https://api.msrc.microsoft.com/cvrf/v3.0/updates/CVE-2026-95932 — MSRC CVRF API confirms the CVE ships in the November 2026 Security Updates (2026-11-10). The Security Update Guide page is JS-only and the CVRF document returned nothing, so affected builds and KB per SKU are unconfirmed. Nothing verified. No exploitation or PoC found.

## Documents

- [advisory] MSRC CVRF: CVE-2026-95932 is in the November 2026 Security Updates https://api.msrc.microsoft.com/cvrf/v3.0/updates/CVE-2026-95932
- [mentions] Windows 11 KB5132061, KB5132059 November 2026 updates https://windowsreport.com/windows-11-kb5132061-kb5131087-kb5132059-november-2026-patch-tuesday-updates-out-now/

## From the sources

Inclusion of functionality from untrusted control sphere in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_