CVE-2026-85880 · Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.

What changed

Elevation of Privilege 11568 · CVSS 7.8. 1.1 · CVSS vector modified to correct the temporal Exploit Code Maturity setting. This is an informational change only.

Technical details

Install the applicable Microsoft security update listed in the MSRC record.

Why it matters

Microsoft marks exploitation as detected, so affected systems require immediate remediation and validation.

Known limitations

Exploited: Yes · Publicly disclosed: No
Affected products and fixed builds remain authoritative in the linked Microsoft record.

Now check

Identify affected products and versions in the MSRC record
Deploy the applicable security update through the normal pilot and production rings
Verify the fixed build and review exploitation guidance after deployment