CVE-2026-85880

A heap-based buffer overflow in Windows allows local privilege escalation, now actively exploited in the wild.

This vulnerability enables an attacker to elevate privileges locally on a Windows system, which can lead to full system compromise. For DIB organizations, this represents a significant compliance risk as it violates the principle of least privilege and can be exploited to bypass security controls. Organizations must ensure all Windows systems are patched immediately and monitor for exploitation attempts.

Shame score — The vulnerability is actively exploited in the wild, indicating a failure in timely patching and defense-in-depth, though it is not a zero-day or ransomware-linked exploit.