MicrosoftCVE-2026-85339

Microsoft Windows: remote code execution

CVE-2026-85339 · Published Oct 13, 2026 · updated Oct 28, 2026

High8.8

Fix: upgrade to 10.0.14393.9612 or later (10 fixed versions below)

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

Affected versions

Package	Affected	Fixed in
Windows 10 Version 1607 Product	>= 10.0.14393.0, < 10.0.14393.9612	10.0.14393.9612
Windows 10 Version 1809 Product	>= 10.0.17763.0, < 10.0.17763.9376	10.0.17763.9376
Windows 10 Version 21H2 Product	>= 10.0.19044.0, < 10.0.19044.7807	10.0.19044.7807
Windows 10 Version 22H2 Product	>= 10.0.19045.0, < 10.0.19045.7807	10.0.19045.7807
Windows 11 Version 23H2 Product	>= 10.0.22631.0, < 10.0.22631.7652	10.0.22631.7652
Windows 11 Version 24H2 Product	>= 10.0.26100.0, < 10.0.26100.9711	10.0.26100.9711
Windows 11 Version 25H2 Product	>= 10.0.26200.0, < 10.0.26200.9711	10.0.26200.9711
Windows 11 Version 26H2 Product	>= 10.0.26300.0, < 10.0.26300.9711	10.0.26300.9711
Windows 11 version 23H2 Product	>= 10.0.22631.0, < 10.0.22631.7652	10.0.22631.7652
Windows 11 version 26H1 Product	>= 10.0.28000.0, < 10.0.28000.3231	10.0.28000.3231
Windows Server 2012 Product	>= 6.2.9200.0, < 6.2.9200.26434	6.2.9200.26434
Windows Server 2012 (Server Core installation) Product	>= 6.2.9200.0, < 6.2.9200.26434	6.2.9200.26434

Details and references