Type Vulnerability
CVE-2026-75650 has an estimated attack likelihood score of 0.347 (~34.7% estimated chance of exploitation in the next 30 days; 98.4th percentile) as of 2026-11-05.
Adobe
Microsoft Windows Heap-Based Buffer Overflow Vulnerability
CVE-2026-85880
What this means
This is rated high severity (7.8 out of 10). It is on the known-exploited catalogue, which means attacks using it have already been seen. Ask IT whether Microsoft Windows 10 1607, Microsoft Windows 10 1809 and Microsoft Windows 10 21h2, and 5 more are in your estate, and treat that as the priority.
Full vendor description
Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.
Scoring and exploitation
7.8/ 10
CVSS 3.1 base scoreHigh
Exploitable only with local access and a low-privilege account, and no one has to click or open anything. High impact on confidentiality, integrity and availability.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability
Longer bar: easier to attack
Attack vectorLocalAV:L
Attack complexityLowAC:L
Privileges requiredLowPR:L
User interactionNoneUI:N
ScopeUnchangedS:U
Impact
Longer bar: more harm
ConfidentialityHighC:H
IntegrityHighI:H
AvailabilityHighA:H
- ~0.4% estimated chance of attack in 30 daysModel estimate (): a probability signal, not confirmed exploitation
- Exploited in the wild
- Yes — confirmed exploitation (US CISA )
- Not reported
- Listed product
- Microsoft Windows
Weaknesses
CWE-122CWE-908
Affected products ()
- Microsoft Windows 10 1607
- Microsoft Windows 10 1809
- Microsoft Windows 10 21h2
- Microsoft Windows 10 22h2
- Microsoft Windows Server 2012
- Microsoft Windows Server 2016
- Microsoft Windows Server 2019
- Microsoft Windows Server 2022
Show the raw CPE strings (15)
- cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*
- cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*
- cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*
- cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*
- cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*
- cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*
- cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*
- cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*
- cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*
- cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*
- cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*
References
2 links from the CVE record, grouped by site; the vendor's advisory comes first.
msrc.microsoft.com1 linkVendor advisory
- CVE-2026-85880 (opens in a new tab)Patch · Vendor Advisory
cisa.gov1 link
- known-exploited-vulnerabilities-catalog (opens in a new tab)US Government Resource