Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

This is a record in the CVE List, the public register of security flaws. CISA added it to its list of flaws known to be used by attackers on 8 Sept 2026. The title and any summary are in the source's own words.

Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.

Kind: Act now
Started: 8 Sept 2026, 18:14
Why we can name the supplier: An official register says it: a CVE record, CISA's list of exploited flaws or the NCSC

Read it at the source

Products it names

Windows Server 2012 / 2012 R2 (Microsoft)
Windows Server (Microsoft)

The latest

We aim to update this thread. For the latest, check the supplier's own page directly: www.cve.org/CVERecord?id=CVE-2026-85880.

This entry comes from our research build of public sources made on 24 Oct 2026.