CVE-2026-85921

High8.2Published on September 14, 2026

Double free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

CVSS score8.2 / 10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Weakness type (CWE)CWE-415

Azure AI Foundry Authentication Failure Earns Maximum-Severity CVSS Rating

Microsoft mitigated CVE-2026-85889, a CVSS 10.0 auth flaw in Azure AI Foundry allowing remote privilege escalation, plus Copilot and Azure bugs.

This product uses the NVD API but is not endorsed or certified by the NVD.