CVE-2026-85880

LLM-synthesized narrative grounded in this CVE's description and references.

• Microsoft/Windows 10 16078 versions

  cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*+ 7 more

  • cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*range: <10.0.14393.9512
  • cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*range: <10.0.14393.9512
  • cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*range: <10.0.19044.7725
  • cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*range: <10.0.19044.7725
  • cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*range: <10.0.19044.7725
  • cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*range: <10.0.19045.7725
  • cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*range: <10.0.19045.7725
  • cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*range: <10.0.19045.7725
• Microsoft/Windows 10 18092 versions

  cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*+ 1 more

  • cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*range: <10.0.17763.9245
  • cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*range: <10.0.17763.9245
• Microsoft/Windows Server 20122 versions

  cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*+ 1 more

  • cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*
• Microsoft/Windows Server 2016

  cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*

  Range: <10.0.14393.9512
• Microsoft/Windows Server 2019

  cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*

  Range: <10.0.17763.9245
• Microsoft/Windows Server 2003

  cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*

  Range: <10.0.20348.5622
• Microsoft/Windowsllm-fuzzy

• msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85880nvdPatchVendor Advisory
• www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource

• Mind the (Patch) Gap , Part 3: Analysis with Volexity Volcano, Threat Intel, and MCP
  Volexity · Oct 16, 2026
• October 2026 Patch Tuesday forecast: Time for an Office cleanup
  Help Net Security · Oct 9, 2026
• Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware
  The Hacker News · Sep 23, 2026
• Volexity spots another China-aligned threat group exploiting Chrome and Microsoft defects
  CyberScoop · Sep 22, 2026
• Hackers Clone Legitimate Websites to Silently Trigger Chrome and Windows Zero-Day Exploits
  Cyber Security News · Sep 22, 2026
• Mind the (Patch) Gap, Part 2: Fake Websites Used to Deploy Chrome & Windows 0-Day Exploits
  Volexity · Sep 21, 2026
• China-Linked Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy GRIMWEDGE
  The Hacker News · Sep 15, 2026
• ⚡ Weekly Recap: Rogue AI Agents, WeChat Worm, PaperCut Attacks, AI Espionage, and Rootkits
  The Hacker News · Sep 14, 2026
• 14th September – Threat Intelligence Report
  Check Point Research · Sep 14, 2026
• Weekly Cybersecurity Newsletter Bulletin – Microsoft 0-day, FortiOS, PAN-OS Flaw, Revolut Data Breach, and 20+ Stories
  Cyber Security News · Sep 14, 2026
• BlueMoon Exploit Kit Chains Recent Chrome, Windows Zero-Days
  SecurityWeek · Sep 12, 2026
• Windows 11 Security Update KB5124008 Breaks Always-On VPN Connections
  Cyber Security News · Sep 11, 2026
• Remote Desktop Services Failures on Windows Servers Following September Update
  Cyber Security News · Sep 11, 2026
• Breach Roundup: ShinyHunters Claims Florida DMV Hack
  GovInfoSecurity · Sep 10, 2026
• Novel Blue Moon kit targeting Chrome and Windows reflects new reality of AI-driven exploits
  The Register Security · Sep 9, 2026
• Chinese espionage groups swarm to exploit triple-link chain of zero-days
  CyberScoop · Sep 9, 2026
• Mind the (Patch) Gap: Multiple Chinese Threat Actors Chain 0-day Exploits in Chrome & Windows
  Volexity · Sep 9, 2026
• Hackers Chain Chrome and Windows Zero-Days in New BlueMoon Exploit Kit Attacks
  Cyber Security News · Sep 9, 2026
• Four Spy Groups Used the Same Chrome and Windows Exploit Kit Within a Week
  The Hacker News · Sep 9, 2026
• Microsoft fixes record 964 flaws, including 2 exploited zero-days
  Malwarebytes Labs · Sep 9, 2026
• Microsoft Shatters Patch Tuesday Record With 974 CVE Fixes in September 2026
  Infosecurity Magazine · Sep 9, 2026
• September 2026 Patch Tuesday: Record patch count, 2 zero-days, and a SigRed successor
  Help Net Security · Sep 9, 2026
• Microsoft Patches Record 974 Flaws, Including Two Exploited Windows Zero-Days
  The Hacker News · Sep 9, 2026
• Microsoft breaks Patch Tuesday record with 974-CVE deluge
  The Register Security · Sep 9, 2026
• Microsoft discloses two actively exploited zero-days among 974 vulnerabilities
  CyberScoop · Sep 8, 2026
• Microsoft posts nearly 1,000 bugs for Patch Tuesday as CISA warns two being exploited
  The Record · Sep 8, 2026
• Microsoft Patch Tuesday for September 2026 — Snort rules and prominent vulnerabilities
  Cisco Talos Intelligence · Sep 8, 2026
• Microsoft Plugs Nearly 1,000 Security Holes
  Krebs on Security · Sep 8, 2026
• Patch Tuesday - September 2026
  Rapid7 Blog · Sep 8, 2026
• Patch Tuesday Sets Another Record With 974 CVEs
  Dark Reading · Sep 8, 2026
• September 2026 Microsoft Patch Tuesday, (Tue, Sep 8th)
  SANS Internet Storm Center · Sep 8, 2026
• Microsoft Patches Record 974 Vulnerabilities, Including Two Exploited Zero-Days
  SecurityWeek · Sep 8, 2026
• Microsoft Windows: 25 Vulnerabilities Disclosed, Including Critical Flaw and Exploited Zero-Day
  Vypr Intelligence · Sep 8, 2026
• Microsoft’s September 2026 Patch Tuesday addresses 964 CVEs (CVE-2026-81963, CVE-2026-85880)
  Tenable Blog · Sep 8, 2026
• Massive Microsoft Patch Tuesday September 2026 – 973 Vulnerabilities Fixed, Including 2 Zero-Days
  Cyber Security News · Sep 8, 2026
• Microsoft: 2 Actively-Exploited Flaws Added to CISA KEV
  Vypr Intelligence · Sep 8, 2026
• CISA Adds Four Known Exploited Vulnerabilities to Catalog
  CISA Alerts
• September 2026 Patch Tuesday: Two Exploited Zero-Days and 113 Critical Vulnerabilities Among 972 CVEs
  CrowdStrike Blog