CVE-2026-85912
HighCVSS 7.0Summary
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with valid credentials can exploit this flaw to elevate privileges, creating a risk of system takeover.
Recommendation
Immediately install Microsoft updates for Windows Clipboard User Service and limit the ability to run untrusted code locally.
Other vulnerabilities in Windows Clipboard User Service
See all- CVE-2026-85863High
Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-85861High
Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-50488High
A command injection vulnerability in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS