CVE-2026-85884

HighCVSS 7.8

Published: 13/10/2026(UTC)Updated: 13/10/2026(UTC)Translated: 14/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.39%

32th percentile - higher than 32% of all known CVEs

Summary

Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally.

Risk Assessment

An attacker could exploit missing authentication to elevate privileges, potentially leading to system control.

Recommendation

Install security updates and enable authentication for critical service functions.

Other vulnerabilities in Windows Health and Optimized Experiences Service

CVE-2026-96183Medium
Missing authentication for a critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to disclose information locally.

Original NVD description (English source)

Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS