HIGHVulnerability
Verified
Global

CISA KEV: Microsoft Windows — Microsoft Windows Heap-Based Buffer Overflow Vulnerability

·Source: CISA KEV

Updated:

Executive Summary

Microsoft Windows Advanced Local Procedure Call contains a heap-based buffer overflow vulnerability that allows an attacker to elevate privileges locally.

Analysis

Microsoft Windows Advanced Local Procedure Call contains a heap-based buffer overflow vulnerability that allows an attacker to elevate privileges locally. Added to CISA Known Exploited Vulnerabilities catalog on 2026-09-08. Remediation due: 2026-09-22.

Indicators of Compromise (1)

CVE (1)
CVE-2026-85880
NVDMITRE CVE
Source Attribution

Originally published by CISA KEV on Sep 8, 2026. Verified by: CISA.

Related Threats

MEDIUMVulnerability

N26 appoints chief financial officer

German challenger bank N26 has named industry veteran Marc Hess as its new chief financial officer and managing director.

Finextra
MEDIUMVulnerability

Passing the Baton: Dark Reading Names New Editor-in-Chief

Fahmida Y Rashid will keep the momentum going as she leads Dark Reading.

Dark Reading
MEDIUMVulnerability

Bahrain central bank to treble tech budget

The Central Bank of Bahrain (CBB) plans to increase its investment in technology by threefold over the next three years as part of a plan to develop Bahrain to the region's primary banking hub.

Finextra