CVE-2026-95922 in Windows: Local Privilege Escalation via Heap Buffer Overflow

Microsoft published advisory CVE-2026-95922 on 2026-11-13, describing a local privilege escalation vulnerability in Windows Graphics Kernel. Compare the Microsoft MSRC advisory with the versions and updates installed on your systems.

Overview and technical details

Windows Graphics Kernel is a Windows kernel component that handles operating system graphics functions. CVE-2026-95922 is a heap buffer overflow; successful exploitation could enable local privilege escalation to SYSTEM. Exploitation requires the attacker to have access already and win a race condition.

Affected systems

The advisory record lists the following Windows versions and Office products with corresponding KBs or update builds. Match each system to its specific version branch and architecture.

Mechanism and impact

The heap buffer overflow is in Windows Graphics Kernel. An attacker must already have access and win a race condition; successful exploitation could allow local privilege escalation to SYSTEM. The confirmed impact is privilege escalation, not remote exploitation.

Exploitation status

Microsoft records Publicly Disclosed: No and Exploited in the Wild: No. These statuses mean the advisory does not confirm public disclosure or exploitation in the wild.

System checks

1. Collect the Windows product name, version, and build to identify the branch to compare:

   Copy commands

   Get-ComputerInfo | Select-Object WindowsProductName, WindowsVersion, OsBuildNumber

2. Check installed hotfixes, then compare them with the KB applicable to the system version and build:

   Copy commands

   Get-HotFix | Select-Object HotFixID, InstalledOn

Remediation and mitigation

1. Prioritize installing the security update KB applicable to the Windows version in use in the earliest update cycle; compare the KB and build in the affected systems table.

2. For the listed Office products, apply the update with the corresponding build.

References

• Microsoft MSRC: CVE-2026-95922