AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

MicrosoftCVE-2026-85921

Microsoft Windows 11 version 26H1: double free

Microsoft

CVE-2026-85921 · Published Sep 14, 2026 · updated Sep 29, 2026

High8.2
Fix: upgrade to 10.0.28000.2956 or later
Microsoft advisory

Double free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

Affected versions

PackageAffectedFixed in
Windows 11 version 26H1
Product
>= 10.0.28000.0, < 10.0.28000.295610.0.28000.2956
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-415

More Microsoft advisories

All Microsoft
Medium 6.1Sep 17Microsoft Copilot: command injectionCVE-2026-55946no fix yetHigh 8.8Sep 15Microsoft Edge (Chromium-based): use after freeCVE-2026-85893fixed in 153.0.4234.32High 8.8Sep 15Microsoft Edge (Chromium-based): heap buffer overflowCVE-2026-69486fixed in 153.0.4234.32High 7.8Sep 14Microsoft Edge (Chromium-based): race conditionCVE-2026-85892fixed in 152.0.4191.66Medium 6.1Sep 11Microsoft Edge (Chromium-based): cross-site scriptingCVE-2026-77490fixed in 151.0.4129.107High 8.5Sep 11Microsoft Edge: use after freeCVE-2026-70341fixed in 152.0.4191.52 +2