CVE-2026-85880

Published Sep 8, 2026

Last updated 5 hours ago

Exploit known CVSS high 7.8

Overview

Description: Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.
Source: secure@microsoft.com
NVD status: Analyzed
Products: windows_10_1607, windows_10_1809, windows_10_21h2, windows_10_22h2, windows_server_2012, windows_server_2016, windows_server_2019, windows_server_2022

Risk scores

CVSS 3.1

Type: Secondary
Base score: 7.8
Impact score: 5.9
Exploitability score: 1.8
Vector string: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity: HIGH

Known exploits

Data from CISA

Vulnerability name: Microsoft Windows Heap-Based Buffer Overflow Vulnerability
Exploit added on: Sep 8, 2026
Exploit action due: Sep 22, 2026
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

Weaknesses

secure@microsoft.com: CWE-122

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",
            "matchCriteriaId": "F5BC051B-C14F-43DF-B3A2-A32EE0DDC142",
            "versionEndExcluding": "10.0.14393.9512",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*",
            "matchCriteriaId": "D8DA8FA6-35F6-4E0F-A9C0-37CB88186C5B",
            "versionEndExcluding": "10.0.14393.9512",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
            "matchCriteriaId": "81786843-7838-4C74-AEA6-E64B6B354387",
            "versionEndExcluding": "10.0.17763.9245",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
            "matchCriteriaId": "D5E29D31-09E1-4C19-AAB0-191AA960C778",
            "versionEndExcluding": "10.0.17763.9245",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",
            "matchCriteriaId": "26BFC889-B503-48BF-9D82-5B3043D9A6B3",
            "versionEndExcluding": "10.0.19044.7725",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*",
            "matchCriteriaId": "E6F2C029-D78A-4FAA-B2E8-FD79C2CABC32",
            "versionEndExcluding": "10.0.19044.7725",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*",
            "matchCriteriaId": "0B423BD2-DDDC-4869-9B98-3275F53B92F1",
            "versionEndExcluding": "10.0.19044.7725",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
            "matchCriteriaId": "254EF7C4-707D-4480-BC27-56F64175A9AD",
            "versionEndExcluding": "10.0.19045.7725",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*",
            "matchCriteriaId": "B318C958-84F6-4E33-A95C-6E95C7E286EB",
            "versionEndExcluding": "10.0.19045.7725",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
            "matchCriteriaId": "9828DC67-F252-4E2B-AFE9-C404BAF414E0",
            "versionEndExcluding": "10.0.19045.7725",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "C7CF508B-369A-4854-97BF-EE90E0A5BF7B",
            "versionEndExcluding": "10.0.14393.9512",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "14138B1B-9554-4B1D-84C6-485FB9763DA4",
            "versionEndExcluding": "10.0.17763.9245",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "496A12F9-40BF-4A40-948B-BDB1C5D17DCB",
            "versionEndExcluding": "10.0.20348.5622",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.

Overview

Risk scores

CVSS 3.1

Known exploits

Weaknesses

Social media

Configurations

Related CVEs

References