CVE-2026-85880

Vendor

Microsoft

Product

Windows

CVSS

10.0

EPSS

0.039 (p90)

CISA KEV

listed

Exposure class

Operating system, Browser, Web platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 62
   KEV CISA KEV 8 Sep 2026

   Microsoft Windows Heap-Based Buffer Overflow Vulnerability

   Microsoft Windows Advanced Local Procedure Call contains a heap-based buffer overflow vulnerability that allows an attacker to elevate privileges locally.

   KEV Fix available CVE-2026-85880 Microsoft
2. 71
   Ivanti advisory Ivanti 8 Sep 2026

   September 2026 Patch Tuesday

   What's happened since August Patch Tuesday It's been an active month between cycles. Since Microsoft's August 11 release, five Microsoft CVEs have been confirmed exploited in the wild, and Google shipped an emergency Chrome fix…

   Exploited CVSS 7.0 Fix available CVE-2026-68820CVE-2026-33824CVE-2026-55040+7 more Ivanti Microsoft
3. 64
   Research ZDI 8 Sep 2026

   The September 2026 Security Update Review

   Whelp, here we are. Deep into the new normal. With nearly 1,000 CVEs coming out from Microsoft and a healthy release from Adobe as well, there’s a phrase from my military days that comes to mind: embrace the suck. Take an…

   Exploited CVSS 10.0 Fix available CVE-2026-75650CVE-2026-81963CVE-2026-85880+57 more Microsoft Adobe
4. 58
   CISA advisory CISA 8 Sep 2026

   CISA Adds Four Known Exploited Vulnerabilities to Catalog

   CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-75650 Adobe Commerce and Magento Improper Neutralization of Special Elements Used…

   Exploited CVE-2026-75650CVE-2026-81963CVE-2026-85880+1 more Microsoft Adobe
5. 31
   Research Insikt Group 19d ago

   September 2026 CVE Landscape

   In September 2026, Insikt Group® identified 94 high-impact vulnerabilities that should be prioritized for remediation, 59 of which had a Very Critical Recorded Future Risk Score. This represents a 29% increase from last month.

   EPSS 1.00 CVE-2026-88771CVE-2026-88772CVE-2026-35273+57 more
6. 20
   Advisory MSRC 16 Sep 2026

   CVE-2026-85880 Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

   CVSS vector modified to correct the temporal Exploit Code Maturity setting. This is an informational change only.

   PoC public CVE-2026-85880 Microsoft
7. 16
   Research Check Point Research 14 Sep 2026

   14th September – Threat Intelligence Report

   For the latest discoveries in cyber research for the week of 14th Setpember, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES IDScan.net, a US identity verification provider, has disclosed a data breach…

   CVE-2026-72898CVE-2026-85880CVE-2026-81963+4 more
8. 14
   KrebsOnSecurity Krebs 8 Sep 2026

   Microsoft Plugs Nearly 1,000 Security Holes

   Microsoft Corp. today issued updates to plug at least 974 security holes in its Windows operating systems and other software, by far its biggest single patch batch ever. Microsoft says artificial intelligence is helping to speed…

   CVE-2026-69730CVE-2026-69829CVE-2026-81963+1 more Microsoft