Microsoft Windows: CVE-2026-85880 Heap-Based Buffer Overflow
- Investigating(current)
- Trending(upcoming)
- Workaround available(upcoming)
- Resolved(upcoming)
Executive summary
A heap-based buffer overflow vulnerability (CVE-2026-85880) affecting Microsoft Windows has been published. Mitigations should be applied in accordance with vendor instructions and CISA guidance.
No verified workaround yet
None of the linked reports describe a mitigation. Follow this incident to hear when one appears.
Official fixUnder active investigation. No report has identified a root cause yet.
Evidence
2 reports · 2 CVEShow
- [1]CVE First reportMicrosoft Windows: CVE-2026-85880 (Heap-Based Buffer Overflow)(opens security advisory in a new tab)
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching…
by CISA KEV 0upvotes 0comments
- [2]CVEMicrosoft Windows: CVE-2026-81963 (Link Following)(opens security advisory in a new tab)
Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching…
by CISA KEV 0upvotes 0comments96% match
Timeline
- First report on security advisory
Microsoft Windows: CVE-2026-85880 (Heap-Based Buffer Overflow)
Source