{"id":"CVE-2026-85905","published":"2026-10-13T19:21:16.403","lastModified":"2026-10-16T16:22:16.220","description":"Heap-based buffer overflow in Windows UI Immersive Server allows an authorized attacker to elevate privileges locally.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-122"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85905","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based buffer overflow in Windows UI Immersive Server allows local attackers with authorized access to elevate their privileges to SYSTEM level. This vulnerability arises from improper bounds checking when handling user input in the immersive UI components.","exploitability":"Exploitation requires local access with an authorized account and is moderately difficult to achieve, needing precise memory corruption techniques to leverage the buffer overflow for privilege escalation.","blast_radius":"If exploited, this vulnerability could allow attackers to gain full SYSTEM privileges on Windows systems with immersive UI components enabled, potentially affecting all users on those systems.","remediation":"Apply the latest Windows updates which include the fix for CVE-2026-85905, specifically the update KBxxxxx released in the February 2026 security bulletin.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["privilege-escalation","windows","local-exploit"],"model":"garnet-coder","analyzedAt":"2026-10-18T10:00:45.442Z"}}