CVE-2026-85370

HighCVSS 7.0/10Last modified Oct 16, 2026

Description

Use after free in WebDAV allows an authorized attacker to elevate privileges locally.

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Oct 13, 2026
Last modified
Oct 16, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-853718.1Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.CVE-2026-853727.0Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.CVE-2026-853737.8Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locallyCVE-2026-853745.5Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.CVE-2026-853757.8Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.CVE-2026-853767.8Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.CVE-2026-853777.8Access of resource using incompatible type ('type confusion') in Windows CD-ROM Driver allows an authorized attacker to elevate privileges lCVE-2026-853787.3A vulnerability was identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected CVE-2026-853797.3A security flaw has been discovered in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. ThisCVE-2026-85385.3Insufficient validation of untrusted input in GPU in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised theCVE-2026-853807.3A weakness has been identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This vulnCVE-2026-853815.3A security vulnerability has been detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b3893
CVE-2026-85370: High severity, CVSS 7.0 | Vulnix