CVE-2026-85850
HIGHCVSS 7.8/10
Last modified
CVE-2026-85850 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally..
Description
Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Windows 11 version 26H1 | >= 10.0.28000.0, < 10.0.28000.3231 |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-85850?
Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally.
How severe is CVE-2026-85850?
CVE-2026-85850 has a CVSS score of 7.8/10 (HIGH severity).
How do I fix CVE-2026-85850?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-85843Use of uninitialized resource in Windows Background Intellig…7.8
- CVE-2026-85846Use after free in Windows Web Account Manager allows an auth…7
- CVE-2026-85847Out-of-bounds read in Windows Print Spooler Components allow…6.5
- CVE-2026-85848Heap-based buffer overflow in Windows Background Intelligent…7.8
- CVE-2026-85849Improper link resolution before file access ('link following…7.8
- CVE-2026-8585Inappropriate implementation in Media in Google Chrome on iO…7.5
- CVE-2026-85851Use after free in Windows SmartScreen allows an authorized a…7.8
- CVE-2026-85852Out-of-bounds read in Windows Management Instrumentation all…5.5
- CVE-2026-85853Out-of-bounds read in Windows DWM Core Library allows an aut…7
- CVE-2026-85854Use after free in Windows DWM Core Library allows an authori…7
- CVE-2026-85855Use after free in Windows DWM Core Library allows an authori…7
- CVE-2026-85856Heap-based buffer overflow in Windows Internet Connection Sh…7.1
Are you affected by CVE-2026-85850?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST