NCSC-VD-2609-002-05
Severity Level: High
Reference No.: NCSC-VD-2609-002-05
Microsoft
Description
CVE-2026-85880: A heap-based buffer overflow in Windows Advanced Local Procedure Call (ALPC) allows an authorized attacker to elevate privileges locally.
CVE-2026-81963: Improper file-link resolution in Windows Update Stack allows an authorized attacker to elevate privileges locally.
Vulnerabilities
- CVE-2026-85880
A heap-based buffer overflow in Windows Advanced Local Procedure Call (ALPC) allows an authorized attacker to elevate privileges locally.
- CVE-2026-81963
Improper file-link resolution in Windows Update Stack allows an authorized attacker to elevate privileges locally.