CVE-2026-26178: Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
Integer size truncation in Windows Advanced Rasterization Platform (WARP) allows an unauthorized attacker to elevate privileges locally.
Other sources
Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.32690Patch KB5082063 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.22631.6936Patch KB5082052 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.8246Patch KB5083769 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.25398.2274Patch KB5082060 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26200.8246Patch KB5083769 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.14393.9060Patch KB5082198 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19045.7184Patch KB5082200 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19044.7184Patch KB5082200 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.20348.5020Patch KB5082142 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.17763.8644Patch KB5082123
Event History
Frequently Asked Questions
What is the severity of CVE-2026-26178?
CVE-2026-26178 has a critical severity rating due to its potential for privilege escalation.
How do I fix CVE-2026-26178?
To fix CVE-2026-26178, apply the relevant Microsoft security updates for your affected version of Windows.
Which versions of Windows are affected by CVE-2026-26178?
CVE-2026-26178 affects various versions of Windows, including Windows 11 and certain editions of Windows Server.
What type of vulnerability is CVE-2026-26178?
CVE-2026-26178 is classified as an elevation of privilege vulnerability.
What can an attacker do with CVE-2026-26178?
An attacker exploiting CVE-2026-26178 could elevate their privileges, potentially allowing unauthorized access to sensitive system functions.