Microsoft Windows Heap-Based Buffer Overflow Vulnerability

ALTO 7.8EXPLOITED (CISA KEV)CVE-2026-85880 · Published 08/09/2026 · updated 24/09/2026

Microsoft Windows Heap-Based Buffer Overflow Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 08/09/2026. Patch affected systems as an emergency.

En resumen

CVE-2026-85880 es una vulnerabilidad ALTO (CVSS 7.8).
Explotada activamente: CISA la añadió al catálogo KEV el 08/09/2026.
Probabilidad de explotación en los próximos 30 días (EPSS): 0.39%, mayor que el 32.8% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
Windows Microsoft	Versions not published yet (product named by CISA KEV)

Description

Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.

References

msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85880 · Patch
cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
CISA KEV · CVE-2026-85880

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free