[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fttXVYf3IQh4tQasZVom1xPAhwlFjYZE2b1IbMszFQgs":3,"g5a-risk:CVE-2026-85880":190},{"success":4,"data":5,"meta":187},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":31,"epssPercentile":25,"epssTimeSeries":32,"severity":34,"affectedProducts":35,"affectedProductsCount":66,"references":67,"referencesCount":79,"weaknesses":80,"weaknessesCount":79,"isActivelyExploited":4,"cisaInfo":96,"otxData":25,"relatedBlogPosts":97,"seoMetadata":98,"configurations":123,"relatedVendorCves":171,"notableEvents":172},"CVE-2026-85880","What is CVE-2026-85880?","Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.","2026-09-08T18:21:14.087","2026-09-24T23:19:20.773",7.8,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":14,"CVSSMetricV30":28,"CVSSMetricV2":29,"CVSSMetricV40":30},[15],{"Source":16,"Type":17,"CVSSData":18,"ExploitabilityScore":26,"ImpactScore":27},"secure@microsoft.com","Secondary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":21,"UserInteraction":22,"Scope":23,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":11,"BaseSeverity":24,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","LOCAL","LOW","NONE","UNCHANGED","HIGH",null,1.8,5.9,[],[],[],0.00387,[33,33,33,33,31,31,31],0.03616,"High",[36,41,44,47,50,54,57,60,63],{"vendor":37,"product":38,"version":39,"criteria":40,"vulnerable":4},"microsoft","windows_10_1607","*","cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",{"vendor":37,"product":42,"version":39,"criteria":43,"vulnerable":4},"windows_10_1809","cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",{"vendor":37,"product":45,"version":39,"criteria":46,"vulnerable":4},"windows_10_21h2","cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",{"vendor":37,"product":48,"version":39,"criteria":49,"vulnerable":4},"windows_10_22h2","cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",{"vendor":37,"product":51,"version":52,"criteria":53,"vulnerable":4},"windows_server_2012","-","cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",{"vendor":37,"product":51,"version":55,"criteria":56,"vulnerable":4},"r2","cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",{"vendor":37,"product":58,"version":39,"criteria":59,"vulnerable":4},"windows_server_2016","cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",{"vendor":37,"product":61,"version":39,"criteria":62,"vulnerable":4},"windows_server_2019","cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",{"vendor":37,"product":64,"version":39,"criteria":65,"vulnerable":4},"windows_server_2022","cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",9,[68,74],{"url":69,"source":70,"tags":71},"https:\u002F\u002Fmsrc.microsoft.com\u002Fupdate-guide\u002Fvulnerability\u002FCVE-2026-85880","Microsoft",[72,73],"Patch","Vendor Advisory",{"url":75,"source":76,"tags":77},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2026-85880","CISA",[78],"US Government Resource",2,[81,89],{"id":82,"name":83,"description":84,"extendedDescription":85,"status":86,"abstraction":87,"structure":88},"CWE-122","Heap-based Buffer Overflow","A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().","","Draft","Variant","Simple",{"id":90,"name":91,"description":92,"extendedDescription":93,"status":94,"abstraction":95,"structure":88},"CWE-908","Use of Uninitialized Resource","The product uses or accesses a resource that has not been initialized.","When a resource has not been properly initialized, the product may behave unexpectedly. This may lead to a crash or invalid memory access, but the consequences vary depending on the type of resource and how it is used within the product.","Incomplete","Base",{"shortDescription":85,"requiredAction":85,"vulnerabilityName":85,"dateAdded":25},[],{"title":99,"metaDescription":100,"keywords":101,"canonicalUrl":102,"structuredData":103},"What is CVE-2026-85880? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2026-85880, a high severity cyber security vulnerability from 2026. Heap-based buffer overflow in Windows ALPC allows an author...","CVE-2026-85880, CVE-2026-85880 vulnerability, CVE-2026-85880 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2026, CVSS score, exploit, patch, remediation, microsoft security, windows_10_1607 vulnerability, windows_10_1809 vulnerability, windows_10_21h2 vulnerability, windows_10_22h2 vulnerability, windows_server_2012 vulnerability","\u002Fwhat-is\u002Fcve-2026-85880",{"@context":104,"@type":105,"headline":99,"description":100,"datePublished":9,"dateModified":10,"author":106,"publisher":110,"about":114,"mainEntityOfPage":118,"articleSection":121,"keywords":122},"https:\u002F\u002Fschema.org","TechArticle",{"@type":107,"name":108,"url":109},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":107,"name":108,"url":109,"logo":111},{"@type":112,"url":113},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":115,"name":6,"description":116,"additionalType":117},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":119,"@id":120},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2026-85880","Cybersecurity","CVE-2026-85880, CVE-2026-85880 vulnerability, CVE-2026-85880 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[124],{"Operator":25,"Negate":25,"Nodes":125},[126],{"Operator":127,"Negate":128,"CPEMatch":129},"OR",false,[130,133,136,139,142,145,148,151,154,157,160,162,164,166,168],{"Vulnerable":4,"Criteria":40,"MatchCriteriaID":131,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":132,"VersionEndIncluding":25},"F5BC051B-C14F-43DF-B3A2-A32EE0DDC142","10.0.14393.9512",{"Vulnerable":4,"Criteria":134,"MatchCriteriaID":135,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":132,"VersionEndIncluding":25},"cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*","D8DA8FA6-35F6-4E0F-A9C0-37CB88186C5B",{"Vulnerable":4,"Criteria":43,"MatchCriteriaID":137,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":138,"VersionEndIncluding":25},"81786843-7838-4C74-AEA6-E64B6B354387","10.0.17763.9245",{"Vulnerable":4,"Criteria":140,"MatchCriteriaID":141,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":138,"VersionEndIncluding":25},"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*","D5E29D31-09E1-4C19-AAB0-191AA960C778",{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":143,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":144,"VersionEndIncluding":25},"26BFC889-B503-48BF-9D82-5B3043D9A6B3","10.0.19044.7725",{"Vulnerable":4,"Criteria":146,"MatchCriteriaID":147,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":144,"VersionEndIncluding":25},"cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*","E6F2C029-D78A-4FAA-B2E8-FD79C2CABC32",{"Vulnerable":4,"Criteria":149,"MatchCriteriaID":150,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":144,"VersionEndIncluding":25},"cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*","0B423BD2-DDDC-4869-9B98-3275F53B92F1",{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":152,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":153,"VersionEndIncluding":25},"254EF7C4-707D-4480-BC27-56F64175A9AD","10.0.19045.7725",{"Vulnerable":4,"Criteria":155,"MatchCriteriaID":156,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":153,"VersionEndIncluding":25},"cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*","B318C958-84F6-4E33-A95C-6E95C7E286EB",{"Vulnerable":4,"Criteria":158,"MatchCriteriaID":159,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":153,"VersionEndIncluding":25},"cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*","9828DC67-F252-4E2B-AFE9-C404BAF414E0",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":161,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"A7DF96F8-BA6A-4780-9CA3-F719B3F81074",{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":163,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"DB18C4CE-5917-401E-ACF7-2747084FD36E",{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":165,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":132,"VersionEndIncluding":25},"C7CF508B-369A-4854-97BF-EE90E0A5BF7B",{"Vulnerable":4,"Criteria":62,"MatchCriteriaID":167,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":138,"VersionEndIncluding":25},"14138B1B-9554-4B1D-84C6-485FB9763DA4",{"Vulnerable":4,"Criteria":65,"MatchCriteriaID":169,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":170,"VersionEndIncluding":25},"496A12F9-40BF-4A40-948B-BDB1C5D17DCB","10.0.20348.5622",[],[173,180],{"id":174,"eventType":175,"eventTime":176,"details":177,"label":178,"color":179},"c8da04ad-cfa2-4bd6-9f06-c5cd0229f248","NEW_CISA","2026-09-09T04:01:15.572113+00:00","CVE added to CISA Known Exploited Vulnerabilities","Added to CISA KEV","red",{"id":181,"eventType":182,"eventTime":183,"details":184,"label":185,"color":186},"b4cea236-24fd-4cab-b196-75a394b4d51a","NEW_NVD","2026-09-09T04:05:00.084107+00:00","New CVE added to NVD","Published to NVD","blue",{"lastModified":10,"cacheTime":188,"version":189},1793197237369,"2.0",{"score":191,"band":34,"action":192,"scoredAt":193},75,"Emergency patch","2026-10-28T07:19:57.116204+00:00"]