Kernel
Inclusion of functionality from untrusted control sphere in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally
At a glance
~0.3% estimated chance of attack in 30 days. Exploitation not confirmed.
Low rather than Medium: UK relevance is 40 of 100, little UK-specific signal so far.
Briefing
- IT leaders should assess whether Microsoft Office is in their estate and ensure systems are updated to mitigate potential privilege escalation risks.
- Businesses should monitor for potential exploitation of CVE-2026-95932, given the reported probability of attack.
Questions to ask IT
- Do we run Microsoft Office and Kernel, and which versions?
- If it is not yet patched, what mitigation is in place, and will the fix be done by 13 Dec?
Next steps
- Confirm whether this affects systems or suppliers in your estate
Vulnerability facts
Full CVE detail CVE-2026-95932- 7.8 · HighExploitable only with local access and a low-privilege account, and no one has to click or open anything. High impact on confidentiality, integrity and availability.CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Not listed
- ~0.3% estimated chance of attack in 30 days
- Not linked from the CVE record
- The vulnerability is identified as CVE-2026-95932 and involves the inclusion of functionality from an untrusted control sphere in the
- CVE-2026-95932 has an estimated 0.3% chance of attack within 30 days, according to estimated attack likelihood data as of 2026-11-13.
Next steps
- Review the advisory against your asset inventory and patch cadence
Summary
- A vulnerability in the Windows Graphics Kernel allows an authorised attacker to elevate privileges locally, affecting systems using this component.
- Microsoft Office customers are advised to update to a supported version to protect against this vulnerability.
Read the original reportMicrosoft Security Update Guide RSS(opens in a new tab)
Products and services involved
- Microsoft Office98% match confidence · CVE-2026-95932
- Kernel92% match confidence · CVE-2026-95932
Pulse
Last change 2h ago · Next recheck 14 Nov 2026, 23:11 UK time
- Story13 Nov 2026, 23:11 UK time · 2h ago
Linked reporting from Microsoft Security Update Guide RSS (vendor psirt).
Read source (Microsoft Security Update Guide RSS)
1 entry so far. The timeline chart appears once this story has more history.
Sources
CVE-2026-95932 Windows Graphics Kernel Elevation of Privilege Vulnerability
How we know
Statements extracted from sources. Higher confidence means stronger corroboration.
- ClaimedHeadline60% confidence
Inclusion of functionality from untrusted control sphere in Windows Graphics Kernel allows an authorised attacker to elevate privileges locally
- ProbableSummary fact75% confidence
Added Microsoft Office software to the Security Updates table. Customers that are running supported version of Microsoft Office are encouraged to update to the indicated version to be protected from this vulnerability.
- ConfirmedCVE identifier95% confidence
Event involves CVE-2026-95932
- ConfirmedEstimated attack likelihood95% confidence
CVE-2026-95932 has an estimated ~0.3% chance of attack in 30 days (24.2th percentile) as of 2026-11-13 — probability signal, not confirmed exploitation