CVE-2026-85880: Microsoft Windows Heap-Based Buffer Overflow Vulnerability.
Microsoft Windows Heap-Based Buffer Overflow Vulnerability. Microsoft Windows Advanced Local Procedure Call contains a heap-based buffer overflow vulnerability that allows an attacker to elevate privileges locally.
- CISA KEV-listed (remediation due 2026-09-22)
- CVSS 7.8 high