CVE-2026-85866
MediumCVSS 4.7Exploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
A vulnerability in Windows ALPC exposes sensitive system information to an unauthorized control sphere. It allows an authorized attacker to disclose information locally.
Risk Assessment
Risk of leaking confidential system data, which may aid an attacker in further attacks.
Recommendation
Install the latest Windows security updates.
Other vulnerabilities in Windows ALPC
See all- CVE-2026-85880HighActively exploited
Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.
- CVE-2023-21674HighActively exploited
An Elevation of Privilege vulnerability in Windows Advanced Local Procedure Call (ALPC). It could allow an attacker to escalate privileges on a Windows system.
- CVE-2026-83917High
Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally.
- CVE-2026-69874High
An untrusted pointer dereference in Windows ALPC allows an authorized attacker to elevate privileges locally.
- CVE-2026-69834High
Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally.
- CVE-2022-41100High
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability.
- CVE-2022-41093High
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability.
- CVE-2022-41045High
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability.
Original NVD description (English source)
Exposure of sensitive system information to an unauthorized control sphere in Windows ALPC allows an authorized attacker to disclose information locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS