CVE-2026-85829

HighCVSS 7.8/10Last modified Oct 16, 2026

Description

Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-415

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Oct 13, 2026
Last modified
Oct 16, 2026
NVD status
Undergoing Analysis

Related CVEs from 2026

CVE-2026-85835.3Insufficient policy enforcement in WebXR in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker who had compromised tCVE-2026-858305.5Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.CVE-2026-858315.5Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to disclose information locally.CVE-2026-858327.8Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locCVE-2026-858337.8Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.CVE-2026-858347.0Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.CVE-2026-858355.5Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally.CVE-2026-858367.8Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.CVE-2026-858377.8Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.CVE-2026-85844.2Inappropriate implementation in Views in Google Chrome on iOS prior to 148.0.7778.168 allowed a remote attacker who had compromised the rendCVE-2026-858406.5Files or directories accessible to external parties in Windows Event Viewer allows an authorized attacker to disclose information over a netCVE-2026-858416.6Use after free in Windows DHCP Server allows an authorized attacker to execute code over a network.
CVE-2026-85829: High severity, CVSS 7.8 | Vulnix