[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fttXVYf3IQh4tQasZVom1xPAhwlFjYZE2b1IbMszFQgs":3,"g5a-risk:CVE-2026-85880":189},{"success":4,"data":5,"meta":186},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":31,"epssPercentile":25,"epssTimeSeries":32,"severity":33,"affectedProducts":34,"affectedProductsCount":65,"references":66,"referencesCount":78,"weaknesses":79,"weaknessesCount":78,"isActivelyExploited":4,"cisaInfo":95,"otxData":25,"relatedBlogPosts":96,"seoMetadata":97,"configurations":122,"relatedVendorCves":170,"notableEvents":171},"CVE-2026-85880","What is CVE-2026-85880?","Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.","2026-09-08T18:21:14.087","2026-09-24T23:19:20.773",7.8,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":14,"CVSSMetricV30":28,"CVSSMetricV2":29,"CVSSMetricV40":30},[15],{"Source":16,"Type":17,"CVSSData":18,"ExploitabilityScore":26,"ImpactScore":27},"secure@microsoft.com","Secondary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":21,"UserInteraction":22,"Scope":23,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":11,"BaseSeverity":24,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","LOCAL","LOW","NONE","UNCHANGED","HIGH",null,1.8,5.9,[],[],[],0.03616,[31,31,31,31,31,31,31],"High",[35,40,43,46,49,53,56,59,62],{"vendor":36,"product":37,"version":38,"criteria":39,"vulnerable":4},"microsoft","windows_10_1607","*","cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",{"vendor":36,"product":41,"version":38,"criteria":42,"vulnerable":4},"windows_10_1809","cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",{"vendor":36,"product":44,"version":38,"criteria":45,"vulnerable":4},"windows_10_21h2","cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",{"vendor":36,"product":47,"version":38,"criteria":48,"vulnerable":4},"windows_10_22h2","cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",{"vendor":36,"product":50,"version":51,"criteria":52,"vulnerable":4},"windows_server_2012","-","cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",{"vendor":36,"product":50,"version":54,"criteria":55,"vulnerable":4},"r2","cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",{"vendor":36,"product":57,"version":38,"criteria":58,"vulnerable":4},"windows_server_2016","cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",{"vendor":36,"product":60,"version":38,"criteria":61,"vulnerable":4},"windows_server_2019","cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",{"vendor":36,"product":63,"version":38,"criteria":64,"vulnerable":4},"windows_server_2022","cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",9,[67,73],{"url":68,"source":69,"tags":70},"https:\u002F\u002Fmsrc.microsoft.com\u002Fupdate-guide\u002Fvulnerability\u002FCVE-2026-85880","Microsoft",[71,72],"Patch","Vendor Advisory",{"url":74,"source":75,"tags":76},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2026-85880","CISA",[77],"US Government Resource",2,[80,88],{"id":81,"name":82,"description":83,"extendedDescription":84,"status":85,"abstraction":86,"structure":87},"CWE-122","Heap-based Buffer Overflow","A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().","","Draft","Variant","Simple",{"id":89,"name":90,"description":91,"extendedDescription":92,"status":93,"abstraction":94,"structure":87},"CWE-908","Use of Uninitialized Resource","The product uses or accesses a resource that has not been initialized.","When a resource has not been properly initialized, the product may behave unexpectedly. This may lead to a crash or invalid memory access, but the consequences vary depending on the type of resource and how it is used within the product.","Incomplete","Base",{"shortDescription":84,"requiredAction":84,"vulnerabilityName":84,"dateAdded":25},[],{"title":98,"metaDescription":99,"keywords":100,"canonicalUrl":101,"structuredData":102},"What is CVE-2026-85880? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2026-85880, a high severity cyber security vulnerability from 2026. Heap-based buffer overflow in Windows ALPC allows an author...","CVE-2026-85880, CVE-2026-85880 vulnerability, CVE-2026-85880 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2026, CVSS score, exploit, patch, remediation, microsoft security, windows_10_1607 vulnerability, windows_10_1809 vulnerability, windows_10_21h2 vulnerability, windows_10_22h2 vulnerability, windows_server_2012 vulnerability","\u002Fwhat-is\u002Fcve-2026-85880",{"@context":103,"@type":104,"headline":98,"description":99,"datePublished":9,"dateModified":10,"author":105,"publisher":109,"about":113,"mainEntityOfPage":117,"articleSection":120,"keywords":121},"https:\u002F\u002Fschema.org","TechArticle",{"@type":106,"name":107,"url":108},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":106,"name":107,"url":108,"logo":110},{"@type":111,"url":112},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":114,"name":6,"description":115,"additionalType":116},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":118,"@id":119},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2026-85880","Cybersecurity","CVE-2026-85880, CVE-2026-85880 vulnerability, CVE-2026-85880 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[123],{"Operator":25,"Negate":25,"Nodes":124},[125],{"Operator":126,"Negate":127,"CPEMatch":128},"OR",false,[129,132,135,138,141,144,147,150,153,156,159,161,163,165,167],{"Vulnerable":4,"Criteria":39,"MatchCriteriaID":130,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":131,"VersionEndIncluding":25},"F5BC051B-C14F-43DF-B3A2-A32EE0DDC142","10.0.14393.9512",{"Vulnerable":4,"Criteria":133,"MatchCriteriaID":134,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":131,"VersionEndIncluding":25},"cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*","D8DA8FA6-35F6-4E0F-A9C0-37CB88186C5B",{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":136,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":137,"VersionEndIncluding":25},"81786843-7838-4C74-AEA6-E64B6B354387","10.0.17763.9245",{"Vulnerable":4,"Criteria":139,"MatchCriteriaID":140,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":137,"VersionEndIncluding":25},"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*","D5E29D31-09E1-4C19-AAB0-191AA960C778",{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":142,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":143,"VersionEndIncluding":25},"26BFC889-B503-48BF-9D82-5B3043D9A6B3","10.0.19044.7725",{"Vulnerable":4,"Criteria":145,"MatchCriteriaID":146,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":143,"VersionEndIncluding":25},"cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*","E6F2C029-D78A-4FAA-B2E8-FD79C2CABC32",{"Vulnerable":4,"Criteria":148,"MatchCriteriaID":149,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":143,"VersionEndIncluding":25},"cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*","0B423BD2-DDDC-4869-9B98-3275F53B92F1",{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":151,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":152,"VersionEndIncluding":25},"254EF7C4-707D-4480-BC27-56F64175A9AD","10.0.19045.7725",{"Vulnerable":4,"Criteria":154,"MatchCriteriaID":155,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":152,"VersionEndIncluding":25},"cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*","B318C958-84F6-4E33-A95C-6E95C7E286EB",{"Vulnerable":4,"Criteria":157,"MatchCriteriaID":158,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":152,"VersionEndIncluding":25},"cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*","9828DC67-F252-4E2B-AFE9-C404BAF414E0",{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":160,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"A7DF96F8-BA6A-4780-9CA3-F719B3F81074",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":162,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"DB18C4CE-5917-401E-ACF7-2747084FD36E",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":164,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":131,"VersionEndIncluding":25},"C7CF508B-369A-4854-97BF-EE90E0A5BF7B",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":166,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":137,"VersionEndIncluding":25},"14138B1B-9554-4B1D-84C6-485FB9763DA4",{"Vulnerable":4,"Criteria":64,"MatchCriteriaID":168,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":169,"VersionEndIncluding":25},"496A12F9-40BF-4A40-948B-BDB1C5D17DCB","10.0.20348.5622",[],[172,179],{"id":173,"eventType":174,"eventTime":175,"details":176,"label":177,"color":178},"c8da04ad-cfa2-4bd6-9f06-c5cd0229f248","NEW_CISA","2026-09-09T04:01:15.572113+00:00","CVE added to CISA Known Exploited Vulnerabilities","Added to CISA KEV","red",{"id":180,"eventType":181,"eventTime":182,"details":183,"label":184,"color":185},"b4cea236-24fd-4cab-b196-75a394b4d51a","NEW_NVD","2026-09-09T04:05:00.084107+00:00","New CVE added to NVD","Published to NVD","blue",{"lastModified":10,"cacheTime":187,"version":188},1792252400603,"2.0",{"score":190,"band":33,"action":191,"scoredAt":192},74,"Emergency patch","2026-10-16T07:17:12.808362+00:00"]