{"id":"CVE-2026-96048","kind":"vulnerability","aliases":["CVE-2026-96048"],"related":[],"title":"Windows Graphics Kernel: uninitialized memory lets a local user read data","description":"Use of uninitialized resource in Windows Graphics Kernel allows an authorized attacker to disclose information locally.","summary":"Windows Graphics Kernel reads an uninitialized resource, so an authorized local user can see memory contents they should not. An attacker gets information disclosure on the machine, not remote code execution.","severity":"medium","cvss":4.7,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","windows"],"not_affected_if":["no-local-logon"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:22:01+00:00","first_seen_at":"2026-11-10T19:25:28+00:00","triaged_at":"2026-11-10T20:04:05+00:00","updated_at":"2026-11-10T20:04:05+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T20:04:05Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Windows Graphics Kernel: uninitialized memory lets a local user read data","impact":"low","summary":"Windows Graphics Kernel reads an uninitialized resource, so an authorized local user can see memory contents they should not. An attacker gets information disclosure on the machine, not remote code execution.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"local user reads uninitialized kernel memory contents","analyst_note":"Check Microsoft's CVE-2026-96048 advisory for affected builds and the patch; the NVD entry alone does not give them.","how_to_check":"- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-local-logon"],"who_is_affected":"Machines running affected Windows versions where a user already has a local logon can trigger the flaw. The sources do not list the affected Windows builds or whether a patch is out, so unknown.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000654,"input_tokens":4493,"output_tokens":410,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-96048':14A,17A 'allow':59C 'attack':40B,62C 'author':29B,61C 'code':49B 'content':35B 'cve':12A,15A 'data':11A 'disclos':64C 'disclosur':43B 'execut':50B 'get':41B 'graphic':2A,21B,57C 'inform':42B,65C 'infrastructur':18B 'kernel':3A,22B,58C 'let':6A 'local':8A,30B,66C 'machin':46B 'memori':5A,34B 'read':10A,23B 'remot':48B 'resourc':26B,54C 'see':33B 'uniniti':4A,25B,53C 'use':51C 'user':9A,31B 'window':1A,19B,20B,56C","nicknames":[],"mitigations":[],"who_affected":"Machines running affected Windows versions where a user already has a local logon can trigger the flaw. The sources do not list the affected Windows builds or whether a patch is out, so unknown.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["infrastructure","medium","windows"],"campaign_type":null,"search_a":"'-2026':13A,16A '-96048':14A,17A 'cve':12A,15A 'data':11A 'graphic':2A 'kernel':3A 'let':6A 'local':8A 'memori':5A 'read':10A 'uniniti':4A 'user':9A 'window':1A","search_b":"'attack':40B 'author':29B 'code':49B 'content':35B 'disclosur':43B 'execut':50B 'get':41B 'graphic':21B 'inform':42B 'infrastructur':18B 'kernel':22B 'local':30B 'machin':46B 'memori':34B 'read':23B 'remot':48B 'resourc':26B 'see':33B 'uniniti':25B 'user':31B 'window':19B,20B","search_c":"'allow':59C 'attack':62C 'author':61C 'disclos':64C 'graphic':57C 'inform':65C 'kernel':58C 'local':66C 'resourc':54C 'uniniti':53C 'use':51C 'window':56C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:22:01+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-96048","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96048","severity":null,"published_at":"2026-11-10T19:22:01+00:00","modified_at":"2026-11-10T19:22:02+00:00","first_seen_at":"2026-11-10T19:25:28+00:00","fetched_at":"2026-11-10T19:25:28+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}