CVE-2026-85884

Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an au…

Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally.

Vendor: Unknown
Product: Unknown
CVSS 3.1: 7.8 (high), scored by secure@microsoft.comCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE: CWE-306
Published: 2026-10-13
NVD modified: 2026-10-13
NVD status: Undergoing Analysis

Not in the CISA KEV catalogue at the last update.

ThreatWire coverage

CVE-2026-85884 record: Windows Health and Optimized Experiences Service elevation of privilege
Windows 11 Health Service flaw CVE-2026-85884 allows local privilege escalation

References

msrc.microsoft.com

Data last updated 15 Oct 2026. Sources: NVD API 2.0. Links: NVD, CISA KEV. Metadata only. ThreatWire does not host exploit code.