Summary
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
Details
What privileges could an attacker gain by exploiting this vulnerability?
Successful exploitation could let an attacker perform actions within the isolated graphics compilation service's security context, outside the attacker's own AppContainer.
How could an attacker exploit this vulnerability?
An attacker who can run a malicious application locally inside an AppContainer could submit specially crafted graphics data to the isolated graphics compilation service. Successful exploitation could let the attacker perform actions within the affected service's isolated security context, outside the attacker's AppContainer. No action by another user is required.
Security updates
10.0.19045.7807 — https://support.microsoft.com/help/5126657
10.0.20348.5761 — https://support.microsoft.com/help/5126655
10.0.22631.7652 — https://support.microsoft.com/help/5126653
10.0.26100.9711 — https://support.microsoft.com/help/5127648
10.0.26100.33650 — https://support.microsoft.com/help/5126646
10.0.28000.3231 — https://support.microsoft.com/help/5127646
10.0.17763.9376 — https://support.microsoft.com/help/5126651
Vulnerabilities 1
-
High 8.8
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
Revision history
-
#1
Information published.
References
-
CVE-2026-118232 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-118232
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss