Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
5912 articles · 249481 vulns · 36/41 feeds (7d)
← Back to list
7.8
CVE-2026-85880KEVEXPLOITEDPATCHED
microsoft · windows_10_1607

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

Description

Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.

Affected Products

VendorProductVersions
microsoftwindows_10_160710.0.14393.0, 10.0.17763.0, 10.0.19044.0, 10.0.19045.0, 6.2.9200.0, 6.2.9200.0, 6.3.9600.0, 6.3.9600.0, 10.0.14393.0, 10.0.14393.0, 10.0.17763.0, 10.0.17763.0, 10.0.20348.0

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
microsoftmicrosoft windowscert_advisory90%
microsoftmicrosoft windows server 2012 r2cert_advisory90%
microsoftwindows_10_22h2cve_cpe95%
microsoftwindows_server_2012cve_cpe95%
microsoftwindows_10_1809cve_cpe95%

References

  • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85880(vendor-advisory, patch)

Related News (21 articles)

Tier B
JPCERT/CC
Security Alert: Microsoft Releases September 2026 Security Updates
→ No new info (linked only)
Tier D
Help Net Security14d ago
October 2026 Patch Tuesday forecast: Time for an Office cleanup
→ No new info (linked only)
Tier D
The Hacker News30d ago
Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware
→ No new info (linked only)
Tier D
The Hacker News38d ago
China-Linked Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy GRIMWEDGE
→ No new info (linked only)
Tier D
The Hacker News39d ago
⚡ Weekly Recap: Rogue AI Agents, WeChat Worm, PaperCut Attacks, AI Espionage, and Rootkits
→ No new info (linked only)
Tier D
SecurityWeek41d ago
BlueMoon Exploit Kit Chains Recent Chrome, Windows Zero-Days
→ No new info (linked only)
Tier D
CSO Online43d ago
Attackers are weaponizing the gap between Chromium fixes and Chrome patches
→ No new info (linked only)
Tier D
The Hacker News44d ago
Four Spy Groups Used the Same Chrome and Windows Exploit Kit Within a Week
→ No new info (linked only)
Tier D
Infosecurity Magazine44d ago
Microsoft Shatters Patch Tuesday Record With 974 CVE Fixes in September 2026
→ No new info (linked only)
Tier B
BSI Advisories44d ago
[NEU] [kritisch] Microsoft Windows: Mehrere Schwachstellen
→ No new info (linked only)
Tier D
Heise Security44d ago
Microsoft schließt Rekordzahl an Sicherheitslücken
→ No new info (linked only)
Tier C
VulDB44d ago
CVE-2026-85880 | Microsoft Windows up to Server 2022 ALPC heap-based overflow
→ No new info (linked only)
Tier D
The Hacker News44d ago
Microsoft Patches Record 974 Flaws, Including Two Exploited Windows Zero-Days
→ No new info (linked only)
Tier D
The Record45d ago
Microsoft posts nearly 1,000 bugs for Patch Tuesday as CISA warns two being exploited
→ No new info (linked only)
Tier C
Cisco Talos45d ago
Microsoft Patch Tuesday for September 2026 — Snort rules and prominent vulnerabilities
→ No new info (linked only)
Tier D
Dark Reading45d ago
Patch Tuesday Sets Another Record With 974 CVEs
→ No new info (linked only)
Tier D
SecurityWeek45d ago
Microsoft Patches Record 974 Vulnerabilities, Including Two Exploited Zero-Days
→ No new info (linked only)
Tier C
Qualys Blog45d ago
Microsoft and Adobe Patch Tuesday, September 2026 Security Update Review
→ No new info (linked only)
Tier B
CCCS Canada45d ago
Microsoft security advisory – September 2026 monthly rollup (AV26-896) – Update 1
→ No new info (linked only)
Tier A
Microsoft MSRC45d ago
CVE-2026-85880 Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
→ No new info (linked only)
Tier C
CrowdStrike Blog45d ago
September 2026 Patch Tuesday: Two Exploited Zero-Days and 113 Critical Vulnerabilities Among 972 CVEs
→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.17.8 HIGH
VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CISA KEV✅ Yes
Actively exploited✅ Yes
Patch available
10.0.14393.951210.0.17763.924510.0.19044.772510.0.19045.77256.2.9200.263496.3.9600.2339710.0.20348.5622
CWECWE-122, CWE-908
PublishedSep 8, 2026
Last enriched45d ago
Trending Score19
Source articles21
Independent16
Info Completeness3/14
Missing: vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

HIGHCVE-2026-96951EXPKEV
Windows Shell Security Feature Bypass Vulnerability
Trending: 131
CRITICALCVE-2026-105014
Azure Pipelines Remote Code Execution Vulnerability
Trending: 51
CRITICALCVE-2026-110063
VM Inspector for Azure Virtual Machines Elevation of Privilege Vulnerability
Trending: 51
HIGHCVE-2026-96185
Microsoft Exchange Online Remote Code Execution Vulnerability
Trending: 39
CRITICALCVE-2026-97785
AAD App Proxy Elevation of Privilege Vulnerability
Trending: 37

Pin to Dashboard

Verification

State: verified
Confidence: 0%

Vulnerability Timeline

CVE Published
Sep 8, 2026
Added to CISA KEV
Sep 8, 2026
Discovered by ZDM
Sep 8, 2026
Actively Exploited
Sep 9, 2026
Patch Available
Sep 9, 2026