High severity8.2NVD Advisory· Published Sep 14, 2026· Updated Sep 29, 2026
CVE-2026-85921
CVE-2026-85921
Description
Double free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
Affected products
3cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:arm64:*+ 1 more
- cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:arm64:*range: <10.0.28000.2956
- cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:x64:*range: <10.0.28000.2956
Patches
Vulnerability mechanics
References
1- msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85921nvdPatchVendor Advisory
News mentions
6- Microsoft’s October Windows Updates Break Remote Desktop ServicesCyber Security News · Oct 14, 2026
- Microsoft’s Recent Windows Updates Break Remote Desktop Services With Error “0xC000000D”Cyber Security News · Oct 14, 2026
- October 2026 Patch Tuesday forecast: Time for an Office cleanupHelp Net Security · Oct 9, 2026
- Microsoft: 24 Azure & AI Vulnerabilities Disclosed, Including Critical Privilege Escalation FlawsVypr Intelligence · Sep 18, 2026
- Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege EscalationThe Hacker News · Sep 18, 2026
- Microsoft Patches 18 Vulnerabilities in AI, Cloud ProductsSecurityWeek · Sep 18, 2026