---
id: "CVE-2026-96137"
page: "https://infrastack.ai/live/CVE-2026-96137"
kind: "vulnerability"
aliases: ["CVE-2026-96137"]
title: "Windows Graphics Kernel: local user can read sensitive system information"
severity: "medium"
cvss: 5.5
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["infrastructure", "windows"]
not_affected_if: []
published_at: "2026-11-10T19:22:11+00:00"
first_seen_at: "2026-11-10T19:25:31+00:00"
updated_at: "2026-11-10T20:00:18+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96137", "first_seen_at": "2026-11-10T19:25:31+00:00"}]
exploit_sources: []
---

# Windows Graphics Kernel: local user can read sensitive system information

Link for people: https://infrastack.ai/live/CVE-2026-96137 (this .md is for agents)

A flaw in the Windows Graphics Kernel lets an authorized attacker on the machine expose sensitive system information to an unauthorized control sphere. The attack is local only and the impact is information disclosure.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-10T19:25:31+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-96137

## From the sources

Exposure of sensitive system information to an unauthorized control sphere in Windows Graphics Kernel allows an authorized attacker to disclose information locally.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_