CVE-2026-85850: Windows Kernel Elevation of Privilege Vulnerability
Published Oct 13, 2026
·Updated
Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally.
Other sources
Windows Kernel Elevation of Privilege Vulnerability
— Microsoft
Affected Software
2 affected componentsFixes available
Microsoft Windows 11=26H1
10.0.28000.3231
Microsoft Windows 11=26H1
10.0.28000.3231
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.28000.3231Patch KB5127646
Event History
Oct 13, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeaknessAffected Software
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
DescriptionSeverity
Frequently Asked Questions
1
Who is exposed to this vulnerability?
Systems running Microsoft Windows 11 are identified as affected. Exploitation is local, so an attacker must already be able to run code on the target system as an authorized user.
2
What level of access does an attacker need, and what could they gain?
The attacker needs low privileges and no user interaction is required. Successful exploitation could allow elevation of privilege with high impact to confidentiality, integrity, and availability.