---
id: "CVE-2026-95983"
page: "https://infrastack.ai/live/CVE-2026-95983"
kind: "vulnerability"
aliases: ["CVE-2026-95983"]
title: "Windows Graphics Kernel: pointer flaw lets a local user gain admin rights"
severity: "high"
cvss: 7.8
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: [{"name": "Windows 10 1809", "fixed": ["10.0.17763.9487"], "affected": ">= 10.0.17763.0, < 10.0.17763.9487", "ecosystem": "microsoft"}, {"name": "Windows 10 21H2", "fixed": ["10.0.19044.7846"], "affected": ">= 10.0.19044.0, < 10.0.19044.7846", "ecosystem": "microsoft"}, {"name": "Windows 10 22H2", "fixed": ["10.0.19045.7846"], "affected": ">= 10.0.19045.0, < 10.0.19045.7846", "ecosystem": "microsoft"}, {"name": "Windows 11 23H2", "fixed": ["10.0.22631.7711"], "affected": ">= 10.0.22631.0, < 10.0.22631.7711", "ecosystem": "microsoft"}, {"name": "Windows 11 24H2", "fixed": ["10.0.26100.9974"], "affected": ">= 10.0.26100.0, < 10.0.26100.9974", "ecosystem": "microsoft"}]
ecosystems: []
tags: ["graphics-kernel", "infrastructure", "local-privilege-escalation", "windows"]
not_affected_if: ["patched-november-2026"]
published_at: "2026-11-10T19:21:54+00:00"
first_seen_at: "2026-11-10T19:25:26+00:00"
updated_at: "2026-11-10T20:14:46+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-95983", "first_seen_at": "2026-11-10T19:25:26+00:00"}, {"source": "analyst", "url": "https://radar.offseq.com/threat/cve-2026-95983-cwe-822-untrusted-pointer-dereference-in-microsoft-windows-10-version-1809-72cc17e36bcd980d", "first_seen_at": "2026-11-10T20:14:46+00:00", "cites": ["https://radar.offseq.com/threat/cve-2026-95983-cwe-822-untrusted-pointer-dereference-in-microsoft-windows-10-version-1809-72cc17e36bcd980d", "https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-17417.html/"]}]
exploit_sources: []
---

# Windows Graphics Kernel: pointer flaw lets a local user gain admin rights

Link for people: https://infrastack.ai/live/CVE-2026-95983 (this .md is for agents)

An untrusted pointer dereference in the Windows Graphics Kernel lets an attacker who already has a local account raise their privileges. Successful exploitation gives the attacker higher-level control of the Windows machine.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- microsoft:Windows 10 1809 affected >= 10.0.17763.0, < 10.0.17763.9487 fixed 10.0.17763.9487
- microsoft:Windows 10 21H2 affected >= 10.0.19044.0, < 10.0.19044.7846 fixed 10.0.19044.7846
- microsoft:Windows 10 22H2 affected >= 10.0.19045.0, < 10.0.19045.7846 fixed 10.0.19045.7846
- microsoft:Windows 11 23H2 affected >= 10.0.22631.0, < 10.0.22631.7711 fixed 10.0.22631.7711
- microsoft:Windows 11 24H2 affected >= 10.0.26100.0, < 10.0.26100.9974 fixed 10.0.26100.9974

## How to check

Run winver or [System.Environment]::OSVersion / 'cmd /c ver' and compare the full build (e.g. 10.0.19045.xxxx) to the fixed build for your Windows version. Lower than the fixed build means exposed. Server 2019/2022/2025 and Win11 25H2/26H1/26H2 are listed as affected by Check Point, with fixed builds unknown until the MSRC page is read.

## Fix

Install the November 2026 Windows cumulative update. Build numbers reported by OffSeq from the CVE record: Win10 1809 10.0.17763.9487; Win10 21H2 10.0.19044.7846; Win10 22H2 10.0.19045.7846; Win11 23H2 10.0.22631.7711; Win11 24H2 10.0.26100.9974. Builds for Server, Win11 25H2/26H1/26H2 not confirmed.

## Timeline

- 2026-11-10T19:25:26+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-95983
- 2026-11-10T20:14:46+00:00 analyst https://radar.offseq.com/threat/cve-2026-95983-cwe-822-untrusted-pointer-dereference-in-microsoft-windows-10-version-1809-72cc17e36bcd980d — MSRC page and NVD not retrievable via tools; versions from OffSeq (CVE record data) and affected list from Check Point. Nothing verified because no vendor page was read. Not exploited per OffSeq, no PoC found. Revisit to read MSRC for Server and 25H2/26H x fixed builds.

## Documents

- [describes] OffSeq: CVE-2026-95983 affected builds and fixed versions https://radar.offseq.com/threat/cve-2026-95983-cwe-822-untrusted-pointer-dereference-in-microsoft-windows-10-version-1809-72cc17e36bcd980d
- [describes] Check Point CPAI-2026-17417: affected Windows list https://advisories.checkpoint.com/defense/advisories/public/2026/cpai-2026-17417.html/

## From the sources

Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_