CVE-2026-85880

HighCVSS 7.8/10Known exploited (CISA KEV)Last modified Sep 24, 2026

Description

Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-122CWE-908

Affected software

No affected versions have been published.

Timeline

Published
Sep 8, 2026
Last modified
Sep 24, 2026
Added to CISA KEV
Sep 8, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-858818.0Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network.CVE-2026-858847.8Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate prCVE-2026-858858.8Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an authorized attacker to elevateCVE-2026-858868.5Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.CVE-2026-858877.7Incorrect permission assignment for critical resource in M365 Copilot allows an authorized attacker to disclose information over a network.CVE-2026-858887.7Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.CVE-2026-858899.8Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.CVE-2026-85898.7GitLab has remediated an issue in GitLab EE affecting all versions from 13.1.4 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 CVE-2026-858917.5Exposure of sensitive information to an unauthorized actor in Azure HDInsight allows an unauthorized attacker to disclose information over aCVE-2026-858927.8Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Edge (Chromium-based) allows an autCVE-2026-858938.8Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.CVE-2026-85908.7Vulnerability in Spotfire Spotfire Enterprise (Spotfire Server modules), Spotfire Spotfire Enterprise with External Consumers (Spotfire Serv