{"id":"CVE-2026-95942","kind":"vulnerability","aliases":["CVE-2026-95942"],"related":[],"title":"Windows Graphics Kernel: out-of-bounds read lets a local user gain privileges","description":"Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.","summary":"An out-of-bounds read in the Windows Graphics Kernel lets a local user with a low-privilege account gain SYSTEM privileges. Microsoft rates it Important (CVSS 7.8), 'Exploitation Less Likely', not exploited and not publicly disclosed at the time of the advisory data. Affected builds and the fixing KB were not available to the analyst.","severity":"high","cvss":7.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["desktop","infrastructure","local-privilege-escalation","servers","windows"],"not_affected_if":["no-local-untrusted-users"],"how_to_check":"Run winver, then compare your build with the fixed build/KB listed for CVE-2026-95942 in the Microsoft Security Update Guide (affected builds not confirmed by the analyst). Check installed updates with: Get-HotFix","fix":null,"status":"open","published_at":"2026-11-10T19:21:46+00:00","first_seen_at":"2026-11-10T19:25:24+00:00","triaged_at":"2026-11-10T19:38:12+00:00","updated_at":"2026-11-10T20:21:59+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T19:38:12Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Windows Graphics Kernel: out-of-bounds read lets a local user gain privileges","impact":"high","summary":"An out-of-bounds read in the Windows Graphics Kernel lets an attacker who already has a local account raise their privileges. The advisory data gives a CVSS score of 7.8 and no details on the exact trigger.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows","desktop","servers"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"local attacker gains elevated system privileges on the machine","analyst_note":"Find the Microsoft Security Update Guide entry for CVE-2026-95942 to get affected builds and the fixed KB or build.","how_to_check":"- Check the Windows build with `winver` and compare it to the fixed build named in Microsoft's advisory for CVE-2026-95942\n- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-local-untrusted-users"],"who_is_affected":"Any Windows machine where an untrusted or low-privilege user can run code locally is potentially exposed. The sources do not name affected Windows builds, so unknown. Machines where only trusted administrators log in carry less exposure.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000697,"input_tokens":4494,"output_tokens":495,"severity_before":"high"},"analyst_status":"done","analyst_note":"Find the Microsoft Security Update Guide entry for CVE-2026-95942 to get affected builds and the fixed KB or build.","search":"'-2026':16A,19A '-95942':17A,20A '7.8':58B 'account':49B 'advisori':73B 'affect':75B 'allow':96C 'analyst':86B 'attack':99C 'author':98C 'avail':83B 'bound':7A,33B,90C 'build':76B 'cve':15A,18A 'cvss':57B 'data':74B 'desktop':21B 'disclos':67B 'elev':101C 'escal':26B 'exploit':59B,63B 'fix':79B 'gain':13A,50B 'graphic':2A,38B,94C 'import':56B 'infrastructur':22B 'kb':80B 'kernel':3A,39B,95C 'less':60B 'let':9A,40B 'like':61B 'local':11A,24B,42B,103C 'local-privilege-escal':23B 'low':47B 'low-privileg':46B 'microsoft':53B 'out-of-bound':4A,30B,87C 'privileg':14A,25B,48B,52B,102C 'public':66B 'rate':54B 'read':8A,34B,91C 'server':27B 'system':51B 'time':70B 'user':12A,43B 'window':1A,28B,37B,93C","nicknames":[],"mitigations":[],"who_affected":"Any Windows machine where an untrusted or low-privilege user can run code locally is potentially exposed. The sources do not name affected Windows builds, so unknown. Machines where only trusted administrators log in carry less exposure.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["desktop","high","infrastructure","localprivilegeescalation","servers","windows"],"campaign_type":null,"search_a":"'-2026':16A,19A '-95942':17A,20A 'bound':7A 'cve':15A,18A 'gain':13A 'graphic':2A 'kernel':3A 'let':9A 'local':11A 'out-of-bound':4A 'privileg':14A 'read':8A 'user':12A 'window':1A","search_b":"'7.8':58B 'account':49B 'advisori':73B 'affect':75B 'analyst':86B 'avail':83B 'bound':33B 'build':76B 'cvss':57B 'data':74B 'desktop':21B 'disclos':67B 'escal':26B 'exploit':59B,63B 'fix':79B 'gain':50B 'graphic':38B 'import':56B 'infrastructur':22B 'kb':80B 'kernel':39B 'less':60B 'let':40B 'like':61B 'local':24B,42B 'local-privilege-escal':23B 'low':47B 'low-privileg':46B 'microsoft':53B 'out-of-bound':30B 'privileg':25B,48B,52B 'public':66B 'rate':54B 'read':34B 'server':27B 'system':51B 'time':70B 'user':43B 'window':28B,37B","search_c":"'allow':96C 'attack':99C 'author':98C 'bound':90C 'elev':101C 'graphic':94C 'kernel':95C 'local':103C 'out-of-bound':87C 'privileg':102C 'read':91C 'window':93C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:21:46+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-95942","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95942","severity":null,"published_at":"2026-11-10T19:21:46+00:00","modified_at":"2026-11-10T19:21:46+00:00","first_seen_at":"2026-11-10T19:25:24+00:00","fetched_at":"2026-11-10T19:25:24+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-95942:2648","url":"https://api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/CVE-2026-95942","severity":null,"published_at":"2026-11-10T20:21:59+00:00","modified_at":"2026-11-10T20:21:59+00:00","first_seen_at":"2026-11-10T20:21:59+00:00","fetched_at":"2026-11-10T20:21:59+00:00","note":"MSRC data (via Update Guide API, fetched through WebFetch summary) gives CVSS 7.8 Important, local/low priv/no UI, SYSTEM impact, 'Exploitation Less Likely', not exploited, not publicly disclosed. Affected builds and fixed KB not retrievable (MSRC page is JS-only, web-cli returned empty). Nothing verified. Fix stays unknown; settle by opening the Update Guide page in a browser. X/community search not done (low-value for B tier).","cites":["https://api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/CVE-2026-95942"]}],"documents":[{"id":118012,"url":"https://api.msrc.microsoft.com/sug/v2.0/en-US/vulnerability/CVE-2026-95942","title":"MSRC Update Guide: CVE-2026-95942 (Windows Graphics Kernel)","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}