{"id":"CVE-2026-96137","kind":"vulnerability","aliases":["CVE-2026-96137"],"related":[],"title":"Windows Graphics Kernel: local user can read sensitive system information","description":"Exposure of sensitive system information to an unauthorized control sphere in Windows Graphics Kernel allows an authorized attacker to disclose information locally.","summary":"A flaw in the Windows Graphics Kernel lets an authorized attacker on the machine expose sensitive system information to an unauthorized control sphere. The attack is local only and the impact is information disclosure.","severity":"medium","cvss":5.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","windows"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:22:11+00:00","first_seen_at":"2026-11-10T19:25:31+00:00","triaged_at":"2026-11-10T20:00:18+00:00","updated_at":"2026-11-10T20:00:18+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T20:00:18Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Windows Graphics Kernel: local user can read sensitive system information","impact":"low","summary":"A flaw in the Windows Graphics Kernel lets an authorized attacker on the machine expose sensitive system information to an unauthorized control sphere. The attack is local only and the impact is information disclosure.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["windows"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"local attacker reads sensitive system information from the kernel","analyst_note":"","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":false,"not_affected_if":[],"who_is_affected":"Windows systems with the Graphics Kernel component are the affected surface, and the attacker must already have an authorized local account. The sources do not state affected Windows builds or whether any non-default configuration is needed. unknown","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000635,"input_tokens":4505,"output_tokens":369,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-96137':13A,16A 'allow':67C 'attack':29B,43B,70C 'author':28B,69C 'control':40B,61C 'cve':11A,14A 'disclos':72C 'disclosur':52B 'expos':33B 'exposur':53C 'flaw':20B 'graphic':2A,24B,65C 'impact':49B 'inform':10A,36B,51B,57C,73C 'infrastructur':17B 'kernel':3A,25B,66C 'let':26B 'local':4A,45B,74C 'machin':32B 'read':7A 'sensit':8A,34B,55C 'sphere':41B,62C 'system':9A,35B,56C 'unauthor':39B,60C 'user':5A 'window':1A,18B,23B,64C","nicknames":[],"mitigations":[],"who_affected":"Windows systems with the Graphics Kernel component are the affected surface, and the attacker must already have an authorized local account. The sources do not state affected Windows builds or whether any non-default configuration is needed. unknown","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["infrastructure","medium","windows"],"campaign_type":null,"search_a":"'-2026':12A,15A '-96137':13A,16A 'cve':11A,14A 'graphic':2A 'inform':10A 'kernel':3A 'local':4A 'read':7A 'sensit':8A 'system':9A 'user':5A 'window':1A","search_b":"'attack':29B,43B 'author':28B 'control':40B 'disclosur':52B 'expos':33B 'flaw':20B 'graphic':24B 'impact':49B 'inform':36B,51B 'infrastructur':17B 'kernel':25B 'let':26B 'local':45B 'machin':32B 'sensit':34B 'sphere':41B 'system':35B 'unauthor':39B 'window':18B,23B","search_c":"'allow':67C 'attack':70C 'author':69C 'control':61C 'disclos':72C 'exposur':53C 'graphic':65C 'inform':57C,73C 'kernel':66C 'local':74C 'sensit':55C 'sphere':62C 'system':56C 'unauthor':60C 'window':64C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T19:22:11+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-96137","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96137","severity":null,"published_at":"2026-11-10T19:22:11+00:00","modified_at":"2026-11-10T19:22:11+00:00","first_seen_at":"2026-11-10T19:25:31+00:00","fetched_at":"2026-11-10T19:25:31+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}