CVE Catalog
CVE-2026-85824
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk0.19%
8th percentile - higher than 8% of all known CVEs
Summary
Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker could exploit this to gain elevated privileges, potentially leading to system takeover.
Recommendation
Apply security updates for Windows and restrict access to systems with the vulnerable component.
Other vulnerabilities in Windows Composite Image File System
Original NVD description (English source)
Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS