Out-of-Bounds Read Vulnerability in Windows Graphics Kernel by Microsoft
CVE-2026-95953

7.8HIGH

Key Information:

Vendor

Microsoft
Status
Microsoft Office 365 For Mac
Microsoft Office For Android
Microsoft Office Ltsc For Mac 2021
Microsoft Office Ltsc For Mac 2024
Vendor
CVE Published:
10 November 2026

What is CVE-2026-95953?

An out-of-bounds read vulnerability has been identified in the Windows Graphics Kernel, which can potentially be exploited by an authorized attacker to gain elevated privileges. This flaw allows the attacker to read portions of memory that are not allocated to the user, potentially giving them access to sensitive information and system functionalities. Microsoft has released guidance and a patch to address this vulnerability. Ensuring your systems are updated is essential to mitigating this risk.

Affected Version(s)

Microsoft Office 365 for Mac 1.0.0 < 16.115.26110837

Microsoft Office for Android 16.0.1 < 16.0.20625.20014

Microsoft Office LTSC for Mac 2021 16.0.1 < 16.115.26110837

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.