Index

Search

Search the public record. Drafts and scheduled notes are not included.

news

Windows 11 Health Service flaw CVE-2026-85884 allows local privilege escalation

Microsoft fixed CVE-2026-85884 on 13 October 2026. A missing authentication check in the Windows Health and Optimized Experiences Service lets a local attacker gain privileges on Windows 11. CVSS 3.1 7.8 (Important, scored by Microsoft). Third-party PoC claimed. Not in CISA KEV.

Published 5h ago

HighPoC Available

CVE-2026-85884

Windows Health and Optimized Experiences Service elevation of privilege

LPE

Published 2d ago