CVE-2026-85860
HighCVSS 7.8Summary
Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker could exploit the flaw to execute code in the context of the queue manager, potentially leading to privilege escalation and system takeover.
Recommendation
Apply the latest Microsoft Windows security updates.
Other vulnerabilities in Windows Message Queuing Queue Manager
See all- CVE-2026-96921Medium
Access of resource using incompatible type ('type confusion') in Windows Message Queuing Queue Manager allows an authorized attacker to disclose information locally. The flaw involves incorrect interpretation of object types during data processing.
- CVE-2026-85334High
Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network.
Original NVD description (English source)
Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS