CVE-2026-85357 in Windows

요약

\~에 의해 MITRE • 2026. 10. 14.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Phone Service allows an authorized attacker to elevate privileges locally.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• 책임이 있는: Microsoft
• 예약하다: 2026. 09. 03.
• 공개: 2026. 10. 14.
• 모더레이션: 수락
• 항목: VDB-419160
• CPE: 20261014
• CWE: CWE-362 (확인됨)
• CVSS: 7.0 (CNA)
• EPSS: 0.00000
• KEV: 아니요
• 활동: 매우 낮음
• 부문: Insurance, Pharma, ...

출처

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-85357
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-85357
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-85357/