Vulnerabilities

Microsoft Windows Heap-Based Buffer Overflow Vulnerability

Microsoft Windows Advanced Local Procedure Call contains a heap-based buffer overflow vulnerability that allows an attacker to elevate privileges locally.

Read at CISA Known Exploited Vulnerabilities catalog

Vendor

Microsoft

Product

Windows

CISA KEV

listed

Exploitation

observed in the wild

Fix

available

Exposure class

Operating system

• CISA Known Exploited Vulnerabilities catalog (nvd.nist.gov)
• CVE-2026-85880 on this site · NVD · CVE.org · Vulnpedia · KEV

Other items that share a CVE or were clustered with this one.

1. 31
   Research Insikt Group 19d ago

   September 2026 CVE Landscape

   EPSS 1.00 CVE-2026-88771CVE-2026-88772CVE-2026-35273+57 more
2. 20
   Advisory MSRC 16 Sep 2026

   CVE-2026-85880 Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

   PoC public CVE-2026-85880 Microsoft
3. 16
   Research Check Point Research 14 Sep 2026

   14th September – Threat Intelligence Report

   CVE-2026-72898CVE-2026-85880CVE-2026-81963+4 more
4. 14
   KrebsOnSecurity Krebs 8 Sep 2026

   Microsoft Plugs Nearly 1,000 Security Holes

   CVE-2026-69730CVE-2026-69829CVE-2026-81963+1 more Microsoft
5. 71
   Ivanti advisory Ivanti 8 Sep 2026

   September 2026 Patch Tuesday

   Exploited CVSS 7.0 Fix available CVE-2026-68820CVE-2026-33824CVE-2026-55040+7 more Ivanti Microsoft
6. 64
   Research ZDI 8 Sep 2026

   The September 2026 Security Update Review

   Exploited CVSS 10.0 Fix available CVE-2026-75650CVE-2026-81963CVE-2026-85880+57 more Microsoft Adobe
7. 58
   CISA advisory CISA 8 Sep 2026

   CISA Adds Four Known Exploited Vulnerabilities to Catalog

   Exploited CVE-2026-75650CVE-2026-81963CVE-2026-85880+1 more Microsoft Adobe