Summary
Impact: Elevation of Privilege. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
Details
How could an attacker exploit this vulnerability?
An attacker who can run a malicious application locally inside an AppContainer could submit specially crafted graphics data to the isolated graphics compilation service. Successful exploitation could let the attacker perform actions within the affected service's isolated security context, outside the attacker's AppContainer. No action by another user is required.
Security updates
10.0.17763.9376 — https://support.microsoft.com/help/5126651
10.0.19044.7807 — https://support.microsoft.com/help/5126657
10.0.20348.5761 — https://support.microsoft.com/help/5126655
10.0.22631.7652 — https://support.microsoft.com/help/5126653
10.0.26100.9711 — https://support.microsoft.com/help/5127648
10.0.26100.33650 — https://support.microsoft.com/help/5126646
10.0.28000.3231 — https://support.microsoft.com/help/5127646
Vulnerabilities 1
-
High 8.8
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
Access of resource using incompatible type ('type confusion') in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.
Revision history
-
#1
Information published.
References
-
CVE-2026-95960 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95960
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss