{"id":"CVE-2026-96084","kind":"vulnerability","aliases":["CVE-2026-96084"],"related":[],"title":"Graphic Fonts: heap buffer overflow lets a local user gain higher privileges","description":"Heap-based buffer overflow in Graphic Fonts allows an authorized attacker to elevate privileges locally.","summary":"A heap-based buffer overflow in the Graphic Fonts component lets an already-authorized local user write past allocated memory. An attacker who can run code on the machine can use it to elevate privileges.","severity":"high","cvss":7.8,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Graphic Fonts","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["local-privilege-escalation","other","windows-suspected"],"not_affected_if":[],"how_to_check":"unknown: no source names the product or version. If this is Windows (unconfirmed, inferred from the Microsoft CVSS assigner), check the MSRC Update Guide entry for CVE-2026-96084 and compare installed cumulative update KBs.","fix":null,"status":"open","published_at":"2026-11-10T19:22:06+00:00","first_seen_at":"2026-11-10T19:25:30+00:00","triaged_at":"2026-11-10T19:36:33+00:00","updated_at":"2026-11-10T19:53:45+00:00","category":"other","confidence":0.3,"triage":{"at":"2026-11-10T19:36:33Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Graphic Fonts: heap buffer overflow lets a local user gain higher privileges","impact":"high","summary":"A heap-based buffer overflow in the Graphic Fonts component lets an already-authorized local user write past allocated memory. An attacker who can run code on the machine can use it to elevate privileges.","audience":"businesses","category":"other","nicknames":[],"who_cares":["local-privilege-escalation"],"confidence":0.3,"fix_status":"unknown","needs_auth":"yes","worst_case":"local user gains elevated privileges on the machine","analyst_note":"Identify the vendor and affected versions of Graphic Fonts from the NVD entry (https://nvd.nist.gov/vuln/detail/CVE-2026-96084) and find the vendor fix.","how_to_check":"unknown","plain_action":"","product_name":"Graphic Fonts","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Only local users who already have an authorized account on the affected system can trigger this, according to the description. The sources do not name the affected product, version range, or whether the component is installed by default. unknown","user_interaction":"unknown","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000677,"input_tokens":4492,"output_tokens":455,"severity_before":"high"},"analyst_status":"done","analyst_note":"Identify the vendor and affected versions of Graphic Fonts from the NVD entry (https://nvd.nist.gov/vuln/detail/CVE-2026-96084) and find the vendor fix.","search":"'-2026':14A,17A '-96084':15A,18A 'alloc':49B 'allow':74C 'alreadi':43B 'already-author':42B 'attack':52B,77C 'author':44B,76C 'base':32B,68C 'buffer':4A,33B,69C 'code':56B 'compon':39B 'cve':13A,16A 'elev':64B,79C 'escal':24B 'font':2A,38B,73C 'fonts':20A 'gain':10A 'graphic':1A,19A,37B,72C 'heap':3A,31B,67C 'heap-bas':30B,66C 'higher':11A 'let':6A,40B 'local':8A,22B,45B,81C 'local-privilege-escal':21B 'machin':59B 'memori':50B 'overflow':5A,34B,70C 'past':48B 'privileg':12A,23B,65B,80C 'run':55B 'suspect':28B 'use':61B 'user':9A,46B 'window':27B 'windows-suspect':26B 'write':47B","nicknames":[],"mitigations":[],"who_affected":"Local privilege escalation (CVSS 7.8, local access, low privileges, no user interaction). An attacker needs an account or code execution on the machine first. No source names the product, versions or install base. The CVSS assigner is Microsoft, so Windows hosts are the likely place to look, but that is not confirmed. Single-user machines with no untrusted local users face lower risk.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"businesses","plain_action":null,"pkeys":["fonts","graphicfonts"],"ptokens":["fonts","graphic"],"labels":["high","localprivilegeescalation","other","vendor","windowssuspected"],"campaign_type":null,"search_a":"'-2026':14A,17A '-96084':15A,18A 'buffer':4A 'cve':13A,16A 'font':2A 'fonts':20A 'gain':10A 'graphic':1A,19A 'heap':3A 'higher':11A 'let':6A 'local':8A 'overflow':5A 'privileg':12A 'user':9A","search_b":"'alloc':49B 'alreadi':43B 'already-author':42B 'attack':52B 'author':44B 'base':32B 'buffer':33B 'code':56B 'compon':39B 'elev':64B 'escal':24B 'font':38B 'graphic':37B 'heap':31B 'heap-bas':30B 'let':40B 'local':22B,45B 'local-privilege-escal':21B 'machin':59B 'memori':50B 'overflow':34B 'past':48B 'privileg':23B,65B 'run':55B 'suspect':28B 'use':61B 'user':46B 'window':27B 'windows-suspect':26B 'write':47B","search_c":"'allow':74C 'attack':77C 'author':76C 'base':68C 'buffer':69C 'elev':79C 'font':73C 'graphic':72C 'heap':67C 'heap-bas':66C 'local':81C 'overflow':70C 'privileg':80C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:22:06+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-96084","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96084","severity":null,"published_at":"2026-11-10T19:22:06+00:00","modified_at":"2026-11-10T19:22:07+00:00","first_seen_at":"2026-11-10T19:25:30+00:00","fetched_at":"2026-11-10T19:25:30+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-96084:2573","url":null,"severity":null,"published_at":"2026-11-10T19:53:45+00:00","modified_at":"2026-11-10T19:53:45+00:00","first_seen_at":"2026-11-10T19:53:45+00:00","fetched_at":"2026-11-10T19:53:45+00:00","note":"No primary source readable: NVD page returned no content, MSRC page empty, no search hits for this id. CVSS assigner is secure@microsoft.com and sibling Graphic Fonts CVEs (CVE-2026-69326, -72986) are Microsoft Windows, so likely Windows, but no page for this CVE confirms it. Product, versions, fix unknown; revisit once MSRC or NVD publishes details."}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}