CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Windows ALPC Heap-Based Buffer Overflow Privilege Escalation Vulnerability (CVE-2026-85880) Security Advisory
[Affected Scope] Locally authenticated users across Microsoft Windows operating systems
[Impact] Local attackers can elevate privileges to SYSTEM level, gaining full control over the target system and executing arbitrary code
[Mitigation] Apply the official Microsoft security patches immediately and restrict local access on unpatched assets
Windows ALPC (Advanced Local Procedure Call) Use-After-Free Elevation of Privilege Vulnerability (CVE-2023-21674) Analysis and Mitigation Guide
[Affected Scope] Microsoft Windows operating systems including Windows 10, Windows 11, and Windows Server 2016/2019/2022 utilizing the ALPC mechanism
[Impact] Successful exploitation allows a local attacker to bypass sandbox environments, elevate privileges to SYSTEM, and execute arbitrary code to fully compromise the host
[Mitigation] Immediately apply the official Microsoft cumulative security updates released in January 2023 or later
Windows ALPC Local Elevation of Privilege Vulnerability Technical Advisory (CVE-2018-8440)
[Affected Scope] Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016
[Impact] A local attacker with low-privilege access can exploit the ALPC interface to execute arbitrary code with SYSTEM privileges, leading to full system compromise
[Mitigation] Apply the official Microsoft cumulative security updates immediately and restrict write access to system task directories