CVE-2026-85921
HighCVSS 8.2Exploitation Probability (EPSS)
Low risk18th percentile - higher than 18% of all known CVEs
Summary
A double free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with local access can exploit the flaw to escalate privileges and gain control over protected kernel resources.
Recommendation
Apply the latest Microsoft security updates for Windows Secure Kernel Mode and limit local access to untrusted users.
Other vulnerabilities in Windows Secure Kernel Mode
See all- CVE-2026-83939High
Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
- CVE-2026-69846High
Integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
- CVE-2026-69501High
Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
- CVE-2026-50392High
A Use-After-Free vulnerability in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
- CVE-2026-42982High
Vulnerability in Windows Secure Kernel Mode due to improper validation of input consistency. An authenticated attacker can elevate privileges locally.
- CVE-2021-33744Medium
A vulnerability in Windows Secure Kernel Mode allows a security feature bypass. An attacker could exploit this flaw to bypass kernel protection mechanisms.
Original NVD description (English source)
Double free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS