CVE-2026-85921
Double free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
CVSS score8.2 / 10
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:HWeakness type (CWE)CWE-415
Vendorsmicrosoft
Affected products
| Vendors | Product | Versions |
|---|---|---|
| microsoft | windows 11 26h1 | < 10.0.28000.2956 |
Related articles
Windows Server 2016 security updates end in January 2027
Windows Server 2016 security updates end in January 2027
Azure AI Foundry Authentication Failure Earns Maximum-Severity CVSS Rating
Microsoft mitigated CVE-2026-85889, a CVSS 10.0 auth flaw in Azure AI Foundry allowing remote privilege escalation, plus Copilot and Azure bugs.
This product uses the NVD API but is not endorsed or certified by the NVD.