CVE-2026-85801

HighCVSS 7.8/10Last modified Nov 11, 2026

Description

Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Nov 10, 2026
Last modified
Nov 11, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-858027.0Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.CVE-2026-858037.0Use after free in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.CVE-2026-858047.8Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.CVE-2026-858056.5Improperly implemented security check for standard in Windows PowerShell allows an unauthorized attacker to bypass a security feature over aCVE-2026-858069.8Integer underflow (wrap or wraparound) in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.CVE-2026-858077.8Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.CVE-2026-858087.5Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.CVE-2026-858099.8Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machineCVE-2026-85818.8Use after free in GPU in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code inside a sandbox via a crCVE-2026-858107.0Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally.CVE-2026-858117.5Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over an adjacent network.CVE-2026-858125.5Files or directories accessible to external parties in Windows Bind Filter Driver allows an authorized attacker to disclose information loca
CVE-2026-85801: High severity, CVSS 7.8 | Vulnix