CVE-2026-85902
HighCVSS 7.8Summary
Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with valid credentials can exploit this flaw to gain higher privileges, potentially resulting in full system compromise.
Recommendation
Install Microsoft updates for Windows Direct Composition as soon as possible and restrict local access to trusted users.
Other vulnerabilities in Windows Direct Composition
See all- CVE-2026-85906High
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
- CVE-2026-83922High
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
- CVE-2026-83912High
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
- CVE-2026-83903High
Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
- CVE-2026-83902High
Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
- CVE-2026-83896High
Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
- CVE-2026-70151High
Use after free in Windows Direct Composition. An authorized attacker can exploit this to elevate privileges locally.
- CVE-2026-70021High
Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS