Actively exploited in the wild
Microsoft Windows Heap-Based Buffer Overflow Vulnerability
Microsoft - Windows · Listed in the CISA KEV since 2026-09-08. This indicates confirmed attacks in production environments.
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
CVE-2026-85880
HighCVSS 7.8KEVSummary
Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with limited privileges could gain full control of the system, compromising confidentiality, integrity, and availability.
Recommendation
Apply the latest Windows security updates from the vendor.
Other vulnerabilities in Windows ALPC
See all- CVE-2022-41100High
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability.
- CVE-2022-41093High
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability.
- CVE-2022-41045High
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability.
Original NVD description (English source)
Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.