CVE-2026-85930
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk10th percentile - higher than 10% of all known CVEs
Summary
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
Risk Assessment
The flaw can be exploited by an attacker with local access to escalate privileges and gain control over the system.
Recommendation
Immediately install Microsoft patches for Windows Image Acquisition and monitor for unusual local user activity.
Other vulnerabilities in Windows Image Acquisition
See all- CVE-2026-85842High
Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
- CVE-2026-83523High
Heap-based buffer overflow in Windows Image Acquisition allows an unauthorized attacker to execute code over a network.
- CVE-2026-69613High
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
- CVE-2026-69500High
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
- CVE-2026-69341High
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
- CVE-2026-50315High
The Windows Image Acquisition component contains a null pointer dereference vulnerability that allows an authorized attacker to elevate privileges locally.
- CVE-2023-35342High
A vulnerability in Windows Image Acquisition allows for elevation of privilege, potentially leading to unauthorized access to the system.
Original NVD description (English source)
Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS