CVE-2026-85880

Vulnerability detailsExploited

Severity

7.8 High · CVSS 3.1 · Microsoft

Exploited

Since 2026-09-08 (CISA)

CISA deadline

2026-09-22

Published

2026-09-08

Microsoft Windows 10 Version 1607

Affected: 10.0.14393.0 to before 10.0.14393.9512

Fixed: 10.0.14393.9512

Microsoft Windows 10 Version 1809

Affected: 10.0.17763.0 to before 10.0.17763.9245

Fixed: 10.0.17763.9245

Microsoft Windows 10 Version 21H2

Affected: 10.0.19044.0 to before 10.0.19044.7725

Fixed: 10.0.19044.7725

Microsoft Windows 10 Version 22H2

Affected: 10.0.19045.0 to before 10.0.19045.7725

Fixed: 10.0.19045.7725

Microsoft Windows Server 2012

Affected: 6.2.9200.0 to before 6.2.9200.26349

Fixed: 6.2.9200.26349

Microsoft Windows Server 2012 (Server Core installation)

Affected: 6.2.9200.0 to before 6.2.9200.26349

Fixed: 6.2.9200.26349

6 more products in the CVE record.

msrc.microsoft.com · CVE record · NVD