Firetruck

CVE-2026-85880

KEV
Updated Oct 31, 2026 · PUBLISHED
View KEV entry →

Description

Microsoft Windows Advanced Local Procedure Call contains a heap-based buffer overflow vulnerability that allows an attacker to elevate privileges locally.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
Windows 10 Version 1607Microsoft / Windows 10 Version 1607>= 10.0.14393.0, < 10.0.14393.9512affected
Windows 10 Version 1809Microsoft / Windows 10 Version 1809>= 10.0.17763.0, < 10.0.17763.9245affected
Windows 10 Version 21H2Microsoft / Windows 10 Version 21H2>= 10.0.19044.0, < 10.0.19044.7725affected
Windows 10 Version 22H2Microsoft / Windows 10 Version 22H2>= 10.0.19045.0, < 10.0.19045.7725affected
Windows Server 2012Microsoft / Windows Server 2012>= 6.2.9200.0, < 6.2.9200.26349affected
Windows Server 2012 R2Microsoft / Windows Server 2012 R2>= 6.3.9600.0, < 6.3.9600.23398affected
Windows Server 2012 R2 (Server Core installation)Microsoft / Windows Server 2012 R2 (Server Core installation)>= 6.3.9600.0, < 6.3.9600.23398affected
Windows Server 2012 (Server Core installation)Microsoft / Windows Server 2012 (Server Core installation)>= 6.2.9200.0, < 6.2.9200.26349affected
Windows Server 2016Microsoft / Windows Server 2016>= 10.0.14393.0, < 10.0.14393.9512affected
Windows Server 2016 (Server Core installation)Microsoft / Windows Server 2016 (Server Core installation)>= 10.0.14393.0, < 10.0.14393.9512affected
Windows Server 2019Microsoft / Windows Server 2019>= 10.0.17763.0, < 10.0.17763.9245affected
Windows Server 2019 (Server Core installation)Microsoft / Windows Server 2019 (Server Core installation)>= 10.0.17763.0, < 10.0.17763.9245affected
Windows Server 2022Microsoft / Windows Server 2022>= 10.0.20348.0, < 10.0.20348.5622affected