Skip to main content
Apexward Pulse
Type Vulnerability

Kernel · Privilege escalation

Windows Graphics Kernel Elevation of Privilege Vulnerability

1 sourceCVE-2026-96126

At a glance

Low
30-day window, from the last update
None observed
Evidence-weighted, not popularity
Why Low

Low rather than Medium: UK relevance is 40 of 100, little UK-specific signal so far.

Briefing

  • Organisations should assess whether their Windows systems are exposed to this privilege elevation risk through the Graphics Kernel component.

Questions to ask IT

  • Do we run Kernel, and which versions?
  • If it is not yet patched, what mitigation is in place, and will the fix be done by 10 Dec?

Next steps

  1. Confirm whether this affects systems or suppliers in your estate

Summary

  • A heap-based buffer overflow in the Windows Graphics Kernel could allow an authorised attacker to elevate privileges locally.

Read the original reportMicrosoft Security Update Guide RSS(opens in a new tab)

Products and services involved

  • Kernel92% match confidence · CVE-2026-96126
17 reports

Part of Multiple Windows Kernel Vulnerabilities

All 17 reports in this story

Pulse

Last change 57m ago · Next recheck 11 Nov 2026, 19:05 UK time

  1. Update10 Nov 2026, 19:05 UK time · 57m ago

    Event first published to the feed.

  2. Story10 Nov 2026, 19:05 UK time · 57m ago

    Linked reporting from Microsoft Security Update Guide RSS (vendor psirt).

    Read source (Microsoft Security Update Guide RSS)

2 entries so far. The timeline chart appears once this story has more history.

Sources

How we know

Statements extracted from sources. Higher confidence means stronger corroboration.

  • ClaimedHeadline60% confidence

    Windows Graphics Kernel Elevation of Privilege Vulnerability

  • ProbableSummary fact75% confidence

    Heap-based buffer overflow in Windows Graphics Kernel allows an authorised attacker to elevate privileges locally.

  • ConfirmedCVE identifier95% confidence

    Event involves CVE-2026-96126