---
id: "CVE-2026-96048"
page: "https://infrastack.ai/live/CVE-2026-96048"
kind: "vulnerability"
aliases: ["CVE-2026-96048"]
title: "Windows Graphics Kernel: uninitialized memory lets a local user read data"
severity: "medium"
cvss: 4.7
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["infrastructure", "windows"]
not_affected_if: ["no-local-logon"]
published_at: "2026-11-10T19:22:01+00:00"
first_seen_at: "2026-11-10T19:25:28+00:00"
updated_at: "2026-11-10T20:04:05+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96048", "first_seen_at": "2026-11-10T19:25:28+00:00"}]
exploit_sources: []
---

# Windows Graphics Kernel: uninitialized memory lets a local user read data

Link for people: https://infrastack.ai/live/CVE-2026-96048 (this .md is for agents)

Windows Graphics Kernel reads an uninitialized resource, so an authorized local user can see memory contents they should not. An attacker gets information disclosure on the machine, not remote code execution.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-10T19:25:28+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-96048

## From the sources

Use of uninitialized resource in Windows Graphics Kernel allows an authorized attacker to disclose information locally.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_