Posts about CVE-2026-96126

Windows Graphics Kernel CVE-2026-96126 enables local privilege escalation; apply updates

Microsoft disclosed CVE-2026-96126, a heap-based buffer overflow in Windows Graphics Kernel that may let an already authorized local attacker escalate privileges to SYSTEM. Microsoft rates it CVSS 3.1 7.8; no in-the-wild exploitation is reported. Match and install the applicable KB.