# CVE-2026-95960: Windows Advanced Rasterization Platform type confusion privilege escalation

Source: https://junglewise.ai/threats/cve-2026-95960-access-of-resource-using-incompatible-type-type-confusion-in  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-11-10. Updated: 2026-11-10  
License: CC BY 4.0 with a link back

CVE-2026-95960 · Severity: high · CVSS 8.8 · Published 2026-11-10

Windows Advanced Rasterization Platform, a graphics processing component in Windows, contains a type confusion vulnerability that allows an authorized user to escalate their privileges to a higher access level on the system. An attacker exploiting this flaw could gain system-level control of a computer, potentially installing malware, stealing data, or taking full control of the device.

Technologies: [Microsoft Windows Advanced Rasterization Platform](https://junglewise.ai/threats/technologies/windows-advanced-rasterization-platform). Vendors: [Microsoft](https://junglewise.ai/threats/vendors/microsoft).

## Quick answers

**Is CVE-2026-95960 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-95960 being exploited in the wild.

**How severe is CVE-2026-95960?** High severity, with a CVSS score of 8.8, published 10 November 2026.

**Which products and versions are affected?** Microsoft Windows Advanced Rasterization Platform.

**Is there a fix for CVE-2026-95960?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-95960 attacked?** It is attacked with local access, in an operating system.

**Am I affected by CVE-2026-95960?** Check whether you run Microsoft Windows Advanced Rasterization Platform. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A type confusion vulnerability exists in Windows Advanced Rasterization Platform where resources are accessed using incompatible types, allowing type confusion attacks. The vulnerability requires an authorized user with local access to execute code and trigger the flaw, resulting in privilege escalation to a higher privilege level. A patch has been released by Microsoft to address this issue.

## Affected products

- Microsoft Windows Advanced Rasterization Platform

## Timeline

- 2026-11-10: disclosed

## References

- [https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95960](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-95960)

## Related threats

- [Windows Advanced Rasterization Platform heap overflow privilege escalation](https://junglewise.ai/threats/cve-2026-94515-heap-based-buffer-overflow-in-windows-advanced-rasterization)
- [Windows Advanced Rasterization Platform stack buffer overflow](https://junglewise.ai/threats/cve-2026-118283-stack-based-buffer-overflow-in-windows-advanced-rasterization)
- [Windows Advanced Rasterization Platform heap buffer overflow](https://junglewise.ai/threats/cve-2026-118280-heap-based-buffer-overflow-in-windows-advanced-rasterization)
- [Windows Advanced Rasterization Platform heap buffer overflow](https://junglewise.ai/threats/cve-2026-118279-heap-based-buffer-overflow-in-windows-advanced-rasterization)
- [Windows Advanced Rasterization Platform out-of-bounds read](https://junglewise.ai/threats/cve-2026-118278-out-of-bounds-read-in-windows-advanced-rasterization-platform)