CVE-2026-85842

Published: Ott 13, 2026 Last Modified: Ott 13, 2026

ExploitDB:

Other exploit source:

Google Dorks:

HIGH 7,8

Source: [email protected]

Attack Vector: local

Attack Complexity: low

Privileges Required: low

User Interaction: none

Scope: unchanged

Confidentiality: high

Integrity: high

Availability: high

AI Translation Available

Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.

134

Draft

Abstraction: Base Structure: Simple

Security Scopes Affected:

Confidentiality Integrity Availability

Potential Impacts:

Read Memory Modify Memory Execute Unauthorized Code Or Commands

Languages: Not Language-Specific, C, C++, Perl

Likelihood of Exploit: High

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85842