CVE-2026-85884

LOWCVSS 7.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-306

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-10-14: 110-14
Referenced assets2 URLs
Full discourse1 post
  • dbugs@ptdbugs

    A PoC/exploit has been discovered for vulnerability CVE-2026-85884 PT ID: PT-2026-112837 Read on dbugs: https://dbu.gs/vulnerability/PT-2026-112837 Vendor: Microsoft Products: • Windows 11 Version 24H2 • Windows 11 Version 25H2 • Windows 11 version 26H1 • Windows 11 Version 26H2 Description: Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally. Link: https://github.com/beardhammer/cve-2026-85884

    00000229
    3.7K followersView on X

Explore more