[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-85880":6},{"stargazers_count":4,"fetched_at":5},7,"2026-09-09T09:01:21.974Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":32,"aliases":33,"duplicate_of":9,"upstream":34,"downstream":35,"duplicates":36,"related":37,"reserved_at":9,"published_at":38,"modified_at":39,"state":40,"summary":41,"references_raw":50,"kevs":64,"epss":9,"epss_history":75,"metrics":76,"affected":85},"CVE-2026-85880","Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.",null,[11,24],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-122","Heap-based Buffer Overflow","A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().","weakness","Draft","Variant","High",[20],{"id":21,"name":22,"techniques":23},"CAPEC-92","Forced Integer Overflow",[],{"_key":25,"id":25,"name":26,"description":27,"type":15,"status":28,"abstraction":29,"likelihood_of_exploit":30,"capec":31},"CWE-908","Use of Uninitialized Resource","The product uses or accesses a resource that has not been initialized.","Incomplete","Base","Medium",[],[],[],[],[],[],[],"2026-09-08T17:14:21.465Z","2026-09-09T04:27:01.173Z","Analyzed",{"cisa_kev":42,"cisa_ransomware":43,"cisa_vendor":44,"epss_severity":9,"epss_score":9,"severity":45,"severity_score":46,"severity_version":47,"severity_source":48,"severity_vector":49,"severity_status":40},true,false,"Microsoft","high",7.8,"v3.1","cve.org","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",[51,58],{"url":52,"sources":53,"tags":55},"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85880",[48,54],"nvd",[56,57],"Vendor Advisory","Patch",{"url":59,"sources":60,"tags":61},"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-85880",[48,54],[62,63],"Government Resource","US Government Resource",[65],{"source":66,"vendor":44,"product":67,"date_added":68,"vulnerability_name":69,"short_description":70,"required_action":71,"due_date":72,"known_ransomware_campaign_use":73,"notes":74,"exploitation_type":9},"cisa","Windows","2026-09-08","Microsoft Windows Heap-Based Buffer Overflow Vulnerability","Microsoft Windows Advanced Local Procedure Call contains a heap-based buffer overflow vulnerability that allows an attacker to elevate privileges locally.","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","2026-09-22","Unknown","https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-85880 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-85880",[],[77,82],{"source":48,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":78,"cvss_v4_0":9},{"baseScore":46,"baseSeverity":79,"vectorString":49,"impactScore":80,"exploitabilityScore":81},"HIGH",9.8,4.6,{"source":54,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":83,"cvss_v4_0":9},{"baseScore":46,"baseSeverity":79,"vectorString":84,"impactScore":80,"exploitabilityScore":81},"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",[86,97,104,111,118,127,134,141,148,160,168,173,178,184,189,195,200],{"ecosystem":9,"name":87,"vendor":88,"product":89,"cpe_part":90,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":91},"windows 10 1607","microsoft","windows_10_1607","o",[92],{"version":93,"is_range":42,"range_type":94,"version_start":9,"version_start_type":9,"version_end":95,"version_end_type":96,"fixed_in":9},"lt10.0.14393.9512","cpe","10.0.14393.9512","excluding",{"ecosystem":9,"name":98,"vendor":88,"product":99,"cpe_part":90,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":100},"windows 10 1809","windows_10_1809",[101],{"version":102,"is_range":42,"range_type":94,"version_start":9,"version_start_type":9,"version_end":103,"version_end_type":96,"fixed_in":9},"lt10.0.17763.9245","10.0.17763.9245",{"ecosystem":9,"name":105,"vendor":88,"product":106,"cpe_part":90,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":107},"windows 10 21h2","windows_10_21h2",[108],{"version":109,"is_range":42,"range_type":94,"version_start":9,"version_start_type":9,"version_end":110,"version_end_type":96,"fixed_in":9},"lt10.0.19044.7725","10.0.19044.7725",{"ecosystem":9,"name":112,"vendor":88,"product":113,"cpe_part":90,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":114},"windows 10 22h2","windows_10_22h2",[115],{"version":116,"is_range":42,"range_type":94,"version_start":9,"version_start_type":9,"version_end":117,"version_end_type":96,"fixed_in":9},"lt10.0.19045.7725","10.0.19045.7725",{"ecosystem":9,"name":119,"vendor":88,"product":120,"cpe_part":121,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":122},"Windows 10 Version 1607","windows 10 version 1607","a",[123],{"version":124,"is_range":42,"range_type":48,"version_start":125,"version_start_type":126,"version_end":95,"version_end_type":96,"fixed_in":9},">= 10.0.14393.0, \u003C 10.0.14393.9512","10.0.14393.0","including",{"ecosystem":9,"name":128,"vendor":88,"product":129,"cpe_part":121,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":130},"Windows 10 Version 1809","windows 10 version 1809",[131],{"version":132,"is_range":42,"range_type":48,"version_start":133,"version_start_type":126,"version_end":103,"version_end_type":96,"fixed_in":9},">= 10.0.17763.0, \u003C 10.0.17763.9245","10.0.17763.0",{"ecosystem":9,"name":135,"vendor":88,"product":136,"cpe_part":121,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":137},"Windows 10 Version 21H2","windows 10 version 21h2",[138],{"version":139,"is_range":42,"range_type":48,"version_start":140,"version_start_type":126,"version_end":110,"version_end_type":96,"fixed_in":9},">= 10.0.19044.0, \u003C 10.0.19044.7725","10.0.19044.0",{"ecosystem":9,"name":142,"vendor":88,"product":143,"cpe_part":121,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":144},"Windows 10 Version 22H2","windows 10 version 22h2",[145],{"version":146,"is_range":42,"range_type":48,"version_start":147,"version_start_type":126,"version_end":117,"version_end_type":96,"fixed_in":9},">= 10.0.19045.0, \u003C 10.0.19045.7725","10.0.19045.0",{"ecosystem":9,"name":149,"vendor":88,"product":150,"cpe_part":121,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":151},"Windows Server 2012","windows server 2012",[152,156,158],{"version":153,"is_range":42,"range_type":48,"version_start":154,"version_start_type":126,"version_end":155,"version_end_type":96,"fixed_in":9},">= 6.2.9200.0, \u003C 6.2.9200.26349","6.2.9200.0","6.2.9200.26349",{"version":157,"is_range":43,"range_type":94,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"na",{"version":159,"is_range":43,"range_type":94,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"r2",{"ecosystem":9,"name":161,"vendor":88,"product":162,"cpe_part":121,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":163},"Windows Server 2012 R2","windows server 2012 r2",[164],{"version":165,"is_range":42,"range_type":48,"version_start":166,"version_start_type":126,"version_end":167,"version_end_type":96,"fixed_in":9},">= 6.3.9600.0, \u003C 6.3.9600.23397","6.3.9600.0","6.3.9600.23397",{"ecosystem":9,"name":169,"vendor":88,"product":170,"cpe_part":121,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":171},"Windows Server 2012 R2 (Server Core installation)","windows server 2012 r2 (server core installation)",[172],{"version":165,"is_range":42,"range_type":48,"version_start":166,"version_start_type":126,"version_end":167,"version_end_type":96,"fixed_in":9},{"ecosystem":9,"name":174,"vendor":88,"product":175,"cpe_part":121,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":176},"Windows Server 2012 (Server Core installation)","windows server 2012 (server core installation)",[177],{"version":153,"is_range":42,"range_type":48,"version_start":154,"version_start_type":126,"version_end":155,"version_end_type":96,"fixed_in":9},{"ecosystem":9,"name":179,"vendor":88,"product":180,"cpe_part":121,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":181},"Windows Server 2016","windows server 2016",[182,183],{"version":124,"is_range":42,"range_type":48,"version_start":125,"version_start_type":126,"version_end":95,"version_end_type":96,"fixed_in":9},{"version":93,"is_range":42,"range_type":94,"version_start":9,"version_start_type":9,"version_end":95,"version_end_type":96,"fixed_in":9},{"ecosystem":9,"name":185,"vendor":88,"product":186,"cpe_part":121,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":187},"Windows Server 2016 (Server Core installation)","windows server 2016 (server core installation)",[188],{"version":124,"is_range":42,"range_type":48,"version_start":125,"version_start_type":126,"version_end":95,"version_end_type":96,"fixed_in":9},{"ecosystem":9,"name":190,"vendor":88,"product":191,"cpe_part":121,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":192},"Windows Server 2019","windows server 2019",[193,194],{"version":132,"is_range":42,"range_type":48,"version_start":133,"version_start_type":126,"version_end":103,"version_end_type":96,"fixed_in":9},{"version":102,"is_range":42,"range_type":94,"version_start":9,"version_start_type":9,"version_end":103,"version_end_type":96,"fixed_in":9},{"ecosystem":9,"name":196,"vendor":88,"product":197,"cpe_part":121,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":198},"Windows Server 2019 (Server Core installation)","windows server 2019 (server core installation)",[199],{"version":132,"is_range":42,"range_type":48,"version_start":133,"version_start_type":126,"version_end":103,"version_end_type":96,"fixed_in":9},{"ecosystem":9,"name":201,"vendor":88,"product":202,"cpe_part":121,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":203},"Windows Server 2022","windows server 2022",[204,208],{"version":205,"is_range":42,"range_type":48,"version_start":206,"version_start_type":126,"version_end":207,"version_end_type":96,"fixed_in":9},">= 10.0.20348.0, \u003C 10.0.20348.5622","10.0.20348.0","10.0.20348.5622",{"version":209,"is_range":42,"range_type":94,"version_start":9,"version_start_type":9,"version_end":207,"version_end_type":96,"fixed_in":9},"lt10.0.20348.5622"]