Skip to content
OpenAdvisories
High 1 exploited CVE MSRC-CVE-2026-85880 1 CVE

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

Published Sep 8, 2026 · Updated Sep 16, 2026 · Revision 2

Vendor: Microsoft

Summary

Impact: Elevation of Privilege. Microsoft rating: Important. Exploited according to Microsoft — Exploitation Detected. Customer action: Required.

Details

What privileges could be gained by an attacker who successfully exploited this vulnerability?
An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.

How could an attacker exploit this vulnerability?
An attacker who can execute code in a low-privilege AppContainer could exploit this vulnerability locally to escape the sandbox and elevate privileges on the affected system. No additional user interaction is required.

Security updates
10.0.17763.9245 — https://support.microsoft.com/help/5122876
10.0.20348.5622 — https://support.microsoft.com/help/5122882
10.0.19044.7725 — https://support.microsoft.com/help/5122878
10.0.14393.9512 — https://support.microsoft.com/help/5123099
6.2.9200.26349 — https://support.microsoft.com/help/5123065
6.3.9600.23398 — https://support.microsoft.com/help/5123066

Vulnerabilities 1

Revision history

  1. #2

    CVSS vector modified to correct the temporal Exploit Code Maturity setting. This is an informational change only.

  2. #1

    Information published.

References