CVE-2026-85868
7.0HighPublished 13 Oct 2026 · NVD status: Undergoing Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- Low
- User interaction
- None
- Impact
- Full C/I/A compromise
- Weakness
- CWE-416
Impact
A local attacker with an existing account can elevate privileges to SYSTEM. They need local code execution on the target host to trigger it.
Root cause
A use-after-free flaw in the Windows Common Log File System (CLFS) driver allows memory corruption.
Affected systems
Versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Fix & remediation
Install the Microsoft security update for this CVE from the MSRC advisory; no workaround or interim mitigation is provided.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.