CVE-2026-85792

CriticalCVSS 9.8/10Last modified Oct 16, 2026

Description

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

No affected versions have been published.

Timeline

Published
Oct 13, 2026
Last modified
Oct 16, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-857935.5Exposure of sensitive system information to an unauthorized control sphere in Windows Sysmain Service allows an authorized attacker to disclCVE-2026-857945.5Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information locally.CVE-2026-857957.8Use after free in Windows Text Services Framework allows an authorized attacker to elevate privileges locally.CVE-2026-857967.8Numeric truncation error in Windows Installer allows an authorized attacker to elevate privileges locally.CVE-2026-857977.5Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.CVE-2026-857987.2Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.CVE-2026-857998.1Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.CVE-2026-85809.6Use after free in Mojo in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox escape via a crafCVE-2026-858007.8Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.CVE-2026-858027.0Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.CVE-2026-858037.0Use after free in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.CVE-2026-858047.8Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
CVE-2026-85792: Critical severity, CVSS 9.8 | Vulnix